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PRIORITIZED VIRTUAL CONNECTION TRANSMISSIONS IN A 
PACKET TO ATM CELL CABLE NETWORK 



FIELD OF THE INVENTION 

5 

The present invention pertains to high-speed broadband communications 
delivered via virtual private networks over a multi-channel shared media 
system. More particularly, the present invention relates to bi-directional 
transmission of packet to ATM cell based communications between a head-end 
1 0 communication controller and a plurality of subscriber terminal units whereby 
individual cells are prioritized and routed according to a virtual connection and 
whereby the virtual connections are organized to support multiple virtual 
private networks in a shared media CATV system. 



15 BACKGROUND OF THE INVENTION 



Due to the proliferation of personal computers, the widespread acceptance 
of the Internet, and the advent of the Information Age, there is a virtual explosion 
in the amount of digital data transmissions. Currently, one c6mmon method for 

20 transmitting and receiving digital data involves the use of telephone modems. A 
telephone modem is used to transmit digital data generated by a computer to an 
intended destination over standard telephone lines. The same modem also can 
receive digital data from a telephone line. This setup enables computers to gain 
access to the Internet and other on-line services over standard telephone jacks. 

25 Although this form of communications is convenient, it is painfully slow because 
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telephone lines simply consist of pairs of twisted copper wires. These lines were 
primarily designed to carry analog voice signals rather than digital data. As 
such, telephone lines are bandwidth limited, and the rate at which digital data 
can be transmitted is relatively quite slow. It can take several minutes or even 
5 hours to download picture, audio, and video files via standard telephone 

modems. Hence, telephone modems are not ideally suited for conveying video 
(e.g., teleconferencing, movies, etc.), graphics (e.g., computer-aided design, 
medical imaging, simulations), or multimedia applications. 

1 0 A faster medium for high-speed communications entails the use of 

dedicated computer networks, whereby computers are interconnected to form 
local area networks or wide area networks (LAN/WAN). However, the 
downside to this approach is the high cost of purchasing, routing, and 
maintaining the requisite interconnecting coaxial and fiber lines. Furthermore, 

1 5 highly skilled network administrators are necessary to monitor the network in 
order to keep it operational. In addition, expensive networking equipment (e.g., 
routers, hubs, repeaters, concentrators, servers, bridges, etc.) must be purchased 
and installed. Hence, the advantage of having faster data communications and 
higher bandwidth comes at a steep price. Furthermore, it is prohibitively 

20 expensive to set up dedicated computer networks amongst individual homes. 

There is, however, another medium which is widespread and already in 
place and which also has a very high bandwidth suitable for transmitting vast 
amounts of information. This medium is the cable TV (CATV) networks. CATV 
25 is comprised of coaxial and fiber optic cables which have very high transmission 
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capacity. These CATV lines connect a central station or headend to set-top boxes 
in everyone's homes. CATV was primarily limited to being only a one-way 
transmission medium, whereby TV signals were broadcast from a headend 
terminal, over the CATV network, to a host of subscriber units. After down 
5 conversion, the RF TV signals are eventually displayed on a subscriber's 
television set. 

Instead of simply broadcasting TV signals, it is feasible to use these same 
CATV networks to provide high capacity two-way data communications. One 

1 0 ideal implementation, as adopted by the present invention, is to use a Cell-based 
Asynchronous Transfer Mode (ATM) approach. ATM is ideally suited for 
supporting services requiring real-time functionality due to its precise control 
over delay and jitter, such as video teleconferencing, game playing, voice 
communications, etc. At the same time, ATM is also well suited for handling 

1 5 data transmissions which are not as delay sensitive (e.g., Internet services). In 
addition, the nature of an ATM cell based system allows for other multimedia 
applications to be upgraded without requiring iterative changes to the 
underlying structure. Hence, ATM offers several advantages over competing 
prior art systems which attempt to deliver digital data by using the CATV 

20 network as an end-to-end solution by converting it into a shared media local area 
network (LAN). Some prior art end-to-end CATV shared media LANs include 
Ethernet, Carrier Sense Multiple Access (CSMA), Collision Detect (CD), Token 
Ring, and Fiber Distributed Data Interface (FDDI) protocols. The main problem 
faced by these different schemes lies with dealing and handling time-critical 

25 data. Because much of the data being conveyed is highly delay sensitive, these 
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prior art systems typically do not provide tight enough tolerances which are 
required in order to adequately support integrated services. As such, they fall far 
short of providing the degree of services that could potentially be derived from 
CATV networks* These problems associated with prior art systems can be 
5 overcome by using an isochronous ATM approach. For instance, Ethernet 
packets can be converted into ATM cells for transmission over the CATV 
network. 

Unfortunately, ATM switches are typically restricted in the total number 
1 0 of addresses which can be handled. Since each subscriber terminal unit (STU) 
coupled to the CATV network has to have its own unique address, the total 
number of STUs which can be supported by a common ATM switching fabric is 
limited. The present invention provides one way to overcome this addressing 
restriction. 

15 

Another problem which must be overcome in converting a CATV system 
into a data highway relates to the fact that CATV networks have historically been 
limited to being a public service provider. The same content was 
indiscriminately conveyed to all the receiving stations. This scheme works well 
20 for public transmissions, such as television broadcasts. However, it fails utterly 
when dealing with transmissions that are sensitive or confidential in nature (e.g., 
a professional working at home). Hence, there is a need for some mechanism to 
ensure that specific data is securely routed to only the intended recipient STU or 
a specific group of STUs. Furthermore, it would be prudent to include some 
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mechanism for filtering data to prevent intentional or benign errors from causing 
the entire CATV to break down. The present invention solves both these issues. 

Yet another problem is that whereas some data transmissions are 
5 extremely delay sensitive, other data might not be as time critical but require a 
high degree of accuracy. For example, telephone communication requires that 
the corresponding data be transmitted rapidly so that the parties can carry on 
conversations with imperceptible lags. In contrast, video data can be routed as 
bandwidth permits because users can suffer slight delays in receiving the data 
1 0 with minor perceptible distortions, but the data should be error-free to ensure a 
high quality picture. Thus, it would be beneficial if a user could somehow tailor 
their reception to meet the specific needs of their current application. The 
present invention allows a user to select a Quality of Service that best meets the 
current needs. 

15 

The present invention offers solutions to all the problems described above 
so that CATV networks can function as a flexible, effective, economic, and fully 
integrated two-way multimedia bearer system, thereby granting immediate 
support for Internet services, traditional voice telephony, and digital video 
20 services. 
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SUMMARY OF THE INVENTION 

The present invention pertains to a two-way cable network offering high- 
speed broadband communications delivered via virtual private networks over a 

5 multi-channel shared media system. Bi-directional transmission of packet to 
ATM cell based communications is established between a head end 
communication controller and a number of subscriber terminal units, whereby 
individual cells are prioritized and routed according to a virtual connection. 
Virtual connections are organized to support multiple virtual private networks in 

1 0 a shared media CATV system. The virtual private network to which a particular 
STU belongs is user selectable, provided that the user is authorized. 
Furthermore, the same STU can service two or more personal computers, 
whereby the computers can belong to either the same or different virtual private 
networks. Due to the flexibility offered by the present invention, STUs belonging 

15 to the same virtual private network can be on different downstream channels 
and different upstream channels on the same MAC domain; different 
downstream channels and the same upstream channel on the same MAC 
domain; or different downstream channels and different upstream channels on 
different MAC domains. The present invention can also handle non-ATM MAC 

20 domains via the same common ATM switch. To overcome the limited number of 
addresses inherent to common ATM switches, a mapping/remapping function is 
implemented in the port cards. 

In one embodiment, multicast downstream packets are received by a 
25 number of STUs, but filtering is performed at each STU so that only those 
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packets which were intended for that particular STU are processed. For 
upstream transmissions, ARP filtering is performed by the STUs in order to 
prevent invalid data from compromising the system. In another embodiment 
information pertaining to downstream traffic is used to implement predictive 
scheduling in order to improve the timing associated with the request/ grant 
cycle. In yet another embodiment, a user has the ability to select a quality of 
service that best suits the needs of the current application. In a further 
embodiment, the scheduling function is implemented on the receiver cards in 
order to provide improved scalability. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example, and not by way of 
limitation, in the figures of the accompanying drawings and in which like 
5 reference numerals refer to similar elements and in which: 

Figure 1 shows a head-end communication controller coupled to the 
subscriber terminal units in a cable television network. 

1 0 Figure 2 illustrates a Hybrid Fiber-Coax Cable TV distribution network 

with a headend network and the placement of the head-end communications 
controller and subscriber terminal units. 

Figure 3 illustrates the connection of downstream and upstream channels 
15 between the headend controller and the subscriber terminal units. 

Figure 4 is a detailed block diagram of the transmit channel port card in 
the headend controller used for processing downstream transmissions. 

20 Figure 5 shows a detailed block diagram of the receiver port card of the 

headend controller used for processing upstream transmissions. 

Figure 6 shows a detailed schematic diagram of the processing of a 
downstream transmission by an STU. 

25 
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Figure 7 is a detailed schematic of the circuitry in an STU used for 
processing upstream transmissions. 

Figure 8 schematically illustrates an Ethernet Root Controller connected to 
5 Ethernet Leaf Processor. 

Figure 9 schematically illustrates an exemplary Ethernet Root Controller. 

Figure 10 schematically illustrates an exemplary Ethernet Leaf Processor. 

10 

Figure 11 schematically illustrates the format of a standard ATM User 
Network Interface (UNI) cell 

Figure 12 schematically illustrates the format of a standards ATM 
1 5 Network to Network Interface (NNI) cell. 

Figure 13 schematically illustrates the null encapsulation of an Ethernet 
Frame into an ATM AAL5 Common Part Convergence Sublayer (CPCS) PDU, 
with pad, and Trailer. 

20 

Figure 14 shows a downstream slot structure. 
Figure 15 shows an upstream slot structure. 
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Figure 16 schematically illustrates an upstream channel that has been 
organized into slots which may be assigned for the transmission of ATM cells 
from a first cable modem A or a second cable modem B. 

5 Figure 17 is a circuit diagram showing the functions and interactions 

corresponding to a VPI selector and a VC demultiplexer of an STU for handling 
incoming ATM cells. 

Figure 18 shows a circuit diagram of an upstream cell scheduler 
1 0 corresponding to an STU. 

Figure 19 shows a flow diagram associated with an STU. 



Figure 20 shows the ATM system of the present invention having multiple 
1 5 virtual networks supported by multiple RF channels. 

Figure 21 shows a schematic diagram of a Headend Communications 
Controller supporting two MAC scheduling domains and an integrated services 
interface. 

20 

Figure 22 is a schematic diagram illustrating how a single Ethernet 
controller can support multiple virtual private networks over the same transmit 
and receive channels. 
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Figure 23 is a schematic diagram illustrating how multiple Ethernet 
controllers can support different virtual private networks. 

Figure 24 shows an implementation of a MAC scheduling domain. 

5 

Figure 25 is a schematic diagram of a Receiver Channel Port Card. 

Figure 26a is a diagram illustrating the protocol flow between a Headend 
Controller (HE) with an STU and associated Home Computing Equipment 
10 (HCE). 

Figure 26b is a diagram illustrating a protocol flow between a Headend 
Controller with an STU and Associated HCE having improved timing by 
informing the scheduler of TCP data that was previously sent downstream. 

15 

Figure 27 illustrates the mapping of the VCI, VPI space of an ATM cell 
through a common ATM UNI Switch Fabric. 

Figure 28 shows the VCI, VPI space of an ATM cell through a common 
20 ATM Switch Fabric with selective mapping.- 

Figure 29 illustrates the collapsing of the VCI, VPI space of an ATM cell 
through a Common ATM NNI or UNI Switch Fabric. 
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Figure 30 shows a schematic diagram of a Headend Communications 
Controller supporting two MAC scheduling domains, whereby one of the MAC 
domains has a non-ATM based protocol 

5 Figure 31 shows a schematic diagram of two MAC scheduling domains, 

whereby one of the MAC domains has a grant mechanism through the switch 
fabric for supporting ATM cells whereas the other MAC domain contains an 
ATM Conversion circuit for performing segmentation and reassembly so that it is 
self-contained and does not require grants through the switch fabric. 

10 

Figure 32 is a schematic diagram showing the Non-ATM Based Protocol 
Controller connected to the ATM Conversion Segmentation and Reassembly 
circuit* 

1 5 Figure 33 shows a detailed schematic diagram of the ATM Conversion 

Segmentation and Reassembly circuit. 

Figure 34 shows a schematic diagram of two MAC scheduling domains, 
whereby one of the MAC domains is ATM only protocol and the other MAC 
20 domain corresponds to a protocol that is ATM and frame based* 

Figure 35 is a schematic diagram showing the ATM and Frame Based 
Protocol Controller connected to the ATM Conversion Segmentation and 
Reassembly circuit. 

25 



CONFIDENTIAL 



14 



Figure 36 is a schematic diagram depicting how cable modems belonging 
to a different protocol can cooperate within various virtual private networks. 



Figure 37 shows a schematic diagram of a Headend Communications 
5 Controller supporting an STU which has the ability to selectively be coupled to 
one of a number of different downstream channels for its reception of desired 
data. 



Figure 38 shows a schematic diagram of a Headend Communications 
1 0 Controller supporting an STU which has been selectively reconfigured to 
establish a virtual path with a different downstream channel 



CONFIDENTIAL 



15 



DETAILED DESCRIPTION 

A system and method for prioritized packet to ATM cell bi-directional 
transmission between a headend controller and multiple station terminal units 

5 over a cable network is described. In the following description, for purposes of 
explanation, numerous specific details are set forth in order to provide a 
thorough understanding of the present invention. It will be obvious, however, to 
one skilled in the art that the present invention may be practiced without these 
specific details. In other instances, well-known structures and devices are shown 

10 in block diagram form in order to avoid obscuring the present invention. 

Residential broad band access network technology based on 
Asynchronous Transfer Modem (ATM) cell transmission is viable. The 
capabilities provided by ATM access network support integrated services 
1 5 bandwidth available in excess of those provided by traditional twisted pair 
copper wire public telephone networks. ATM services to the subscriber home 
place needed Quality of Service capability closest to the subscriber premises 
allowing immediate support for Internet services, traditional voice telephony, 
and digital video services. 

20 

The selection of ATM cells as the data-link layer protocol data unit for 
Cable TV networks has the advantage in that it provides a suitable integrated 
multiplexing platform capable of supporting both Constant Bit Rate (CBR) 
scheduling service for isochronous services and the Available Bit Rate (ABR) 
25 scheduling service for best effort traffic classes which is well suited for 
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Internet services. In addition, the nature of ATM cell based systems allow for 
other multimedia applications to be added in the future without requiring 
iterative changes to the basic ATM protocol. Cable operators can deploy 
ATM systems as part of an evolutionary path to a fully integrated multimedia 
5 bearer service offering. 

In one embodiment, a Media Access Control (MAC) protocol layer is 
layered or coupled to existing physical RF transmission system to create a 
means to pass cell-based data-link layer information between cooperating 

1 0 subscriber terminal units (STUs — also known as cable modems) and the 
head-end controller. In one embodiment, the ATM data-link protocol is 
layered in a straightforward manner using a slotted approach for both the 
downstream and upstream RF channels. Downstream traffic management is 
not distributed and is under the direct control of the head-end 

1 5 communications controller. Upstream traffic management must be precisely 
controlled to support the Quality of Service (QOS) needs of the subscriber 
system on a user demand basis. The choice of the allocation protocol and the 
placement of the bandwidth ownership intelligence is important. To properly 
allocate and mange CBR streams in a contention-free manner, the 

20 straightforward approach is to place the ownership of the upstream 

bandwidth subscriber unit and by centralizing the allocation intelligence in 
the network. Communications between the head-end controller and each 
subscriber unit is important as permission to use the upstream channel is 
granted by the head-end controller whose allocation algorithm must take into 

25 account needs communicated to it by each subscriber unit. These 
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communications between bearer service elements must support at least a 
subset of the ATM User Network Interface (UNI) traffic management classes: 
i.e v Constant Bit Rate (CBR), Available Bit Rate (ABR), Variable Bit Rate 
(VBR), and Unspecified Bit Rate (UBR). 

5 

Further, the use of ATM as the basic data-link protocol data unit 
transmitted over the access network directly supports the use of non-ATM 
network interfaces with the subscriber home or small business. Specifically, 
other networking services are transmitted over ATM using standard ATM 
1 0 adaptation layer methods as details in ITU-T specifications, ATM Forum 
specifications, and Internet Engineering Task Force Internet protocol 
standards. Examples of the other network services include, but are not 
limited to: Ethernet, IP datagrams, digital video using MPEG2 standards, and 
telephony. 

15 

Residential system architectures shall be constructed such that both 
small and large systems can be built that work in the variety of cable 
television plants that exist today and allow incremental growth such that 
deployment of Synchronous Optical NETwork (SONET) technology is easily 
20 incorporated in a variety of places within the back -end and distribution 
networks. 

As used herein, the following terms have the following meanings: 
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"ATM data" refers to cells having a fixed length comprised of a header 
followed by a payload, which is commonly 48 bytes. The ATM Forum Traffic 
Management Revision 4.0 specification defines an architecture which 
supports five ATM service categories: these are Constant Bit Rate (CBR), 

5 Real-Time Variable Bit Rate (rt-VBR), Non-Real-Time Variable Bit Rate (nrt- 
VBR), Available Bit Rate (ABR) r and Unspecified Bit Rate (UBR). In addition, 
various minimum and maximum data bit rates may be specified for each of 
the service categories. When a user requests services from an ATM network, 
they select the service category and the desired data rates. CBR directly 

1 0 supports voice telephony and some forms of video-teleconferencing, ABR and 
UBR directly support Internet data services, and VBR directly supports 
downstream digital video services. 

'A Cable Television Network", also known as a Community Access 
1 5 Television (CATV) network. A traditional coaxial cable tree and branch or 
Hybrid Fiber-Coax (HFC) network. The downstream signals and 
downstream channels originate from a CATV head end (or headend). The 
upstream signals and upstream channels terminate in the CATV headend. 
Typical CATV signals enter and exit the headend via coaxial cable or 
20 combinations of coaxial cable and amplitude modulated (AM) optical fiber. It 
is envisioned that future CATV distribution systems will incorporate the 
individual or combined use of either traditional coaxial cable, AM modulated 
optical fiber, digitally modulated optical fiber, or wireless "last drop" systems. 
Further, wiring in a headend typically uses traditional coaxial cabling for 
25 interconnecting equipment and distribution systems within the headend, it is 
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envisioned that future wiring may consist of individual or combinations of 
coaxial cable, AM fiber, digital fiber, or wireless techniques. 

"Channel spacing" refers to the minimum RF spectral bandwidth 
5 spacing needed between communication channels, this is also referred to as 
the minimum RF spectral bandwidth needed by a communication channel. 

"Communications channel" refers to the allocation of a range of radio 
frequency spectrum for conveying digital information. 

10 

"Contention grant" refers to the signal generated by the headend 
controller which gives permission for any STU to transmit in a particular slot. 

"Direct grant" refers to the signal generated by the headend controller 
1 5 which allows an STU to transmit an ATM cell. 

A "downstream signal" embodies both a modulation and 
demodulation means by which digital information is encoded in a 
downstream form suitable for transmission over the downstream 

20 transmission segment media, transmitted by the headend controller, and 

ultimately decoded in a manner suitable for reception and processing by the 
cable modem. The downstream form is one of or a combination of a common 
variety of modulation techniques suited to the transmission medium such as, 
but not limited to, Quadrature Phase Shift Keying (QPSK), Quadrature 

25 Amplitude Modulation (QAM); or other advanced modulation techniques 



CONFIDENTIAL 



20 



such as, but not limited to, Code Division Multiple Access (CDMA), Spread 
Aloha, or other orthogonal based system such as Discrete Multitone (DMT); 
or other technique suitable to modulating signals through optical fiber; or 
other technique suitable for wireless last-drop systems. A downstream 
5 distribution system may provide conversion from one downstream media to 
another, on a segment by segment basis* One example is coaxial cable in the 
headend, to AM fiber (in an HFC system) and back to coaxial cable. 

A "downstream channel" embodies the spectral bandwidth, frequency, 
1 0 and other spectral characteristics required for transmitting and amplifying a 
downstream signal through the downstream media. 

In the preferred embodiment, "downstream latency" (or downstream 
channel pipeline delay) refers to the time delay experienced by a packet as is 

15 traverses the downstream channel. Downstream Latency is objectively 

measured between a transmission reference point in the head-end controller 
and a reception reference point in the Subscriber Terminal Unit or Cable 
modem. Downstream Latency is subjectively measured by users as a 
perceivable component of response time. Downstream Latency is a 

20 combination of both fixed and variable time delay components, including, but 
not limited to, Forward Error Correction processing delay and over-the-cable 
propagation delay. Different Forward Error Correction techniques have 
different amounts of burst protection and subsequently different amounts of 
end-to-end pipeline delay. In general, the wider the burst protection, the 

25 longer the downstream delay. For example, some FEC techniques will 
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provide error correction protection for noise burst sizes of up to 19 
microseconds, with a 600 microsecond latency contribution. Other techniques 
will provide up to 96 microseconds of noise burst protection with 3.75 
milliseconds of latency contribution. 

5 

"A Headend Digital Communications Controller or Headend 
Controller" is a device located in the CATV headend responsible for 
mastering the communications between itself and a plurality of cable 
modems. The headend controller is responsible for managing downstream 

1 0 and upstream bandwidth resources which have been assigned to a cable 

modern service. A downstream channel is serviced by a transmitter port card 
located within the headend controller. An upstream channel is serviced by a 
receiver port card located within the headend controller. A port card may 
service one or more channels. A headend controller may simultaneous 

1 5 provide service and control one or more downstream channels and one or 
more upstream channels. 

A "Home Equipment (HE), or Home Terminal Equipment (HTE)" is a 
consumer appliance device, typically located in the subscriber's home, which 

20 participates in an exchange of digital data with other network devices 
connected to the Home Network. In the preferred embodiment, a Home 
Equipment is a two-way interactive digitally networked packet exchange 
device. Examples of Home Equipment are personal computers, digital 
telephones, digital televisions, digital answering machines, digital FAX 

25 machines, digital network computing appliances, digital interactive game 
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devices, etc. It is envisioned that future Home Equipment will be 
interconnected to the Home Network by the individual or combined use of 
either traditional coaxial cable, twisted pair copper cable, fiber optic cable, or 
wireless links. It is noted that Home Equipment may also be one-way 
5 transmit communication devices, such as a burglar alarm system (e.g., 
surveillance video) or energy management system (remote sensing 
equipment), which provide sensory management for a subscriber's home. It 
is noted that Home Equipment may also be one-way receive communication 
devices, such as legacy television systems, XI 0 power control stations, 
1 0 toasters, etc. which in the future will receive operational instructions from the 
Home Network or from other Home Equipment. 

A Home Computing Equipment (HCE) is a subset of Home 
Equipment. In the preferred embodiment, Home Computing Equipment 
1 5 consists of two-way interactive networked packet exchange devices such as 
personal computers, X Terminals, Unix workstations, etc.. It is envisioned 
that future Home Computing Equipment will be interconnected to the Home 
Network by the individual or combined use of either traditional coaxial cable, 
twisted pair copper cable, fiber optic cable, or wireless links. 

20 

"Null grant" refers to a signal issued by the headend controller to an 
STU which instructs the STU to delay entering an idle state. 
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"Packet data" refers to the components of a protocol packet comprised 
of a fixed or variable length header and either a fixed or variable length data 
payload. 

5 "QAM" refers to Quadrature Amplitude Modulation, which is a well 

known encoding and decoding method for digital data. "16 QAM" refers to a 
method which produces a digital bit carrying gain of 4 bits per Hertz. "64 
QAM" refers to a method which produces a digital bit carrying gain of 6 bits 
per Hertz. "256 QAM" refers to a method which produces a digital bit carry 
1 0 gain of 8 bits per Hertz. 

"Quality of Service" (QoS) is specified using three separate parameters: 
peak-to-peak cell delay variation (known commonly as jitter); maximum cell 
transfer delay (also know as latency) which specifics the maximum end-to- 

1 5 end delay tolerance allowed for the connection; and cell lost ratio, this is 
basically a maximum tolerable discard rate for ATM cells (which directly 
impacts error loss rate). The user specifies the service category, bandwidth 
parameters for the service category, and the QoS requirements for each 
connection. For example, users can specify an ABR or UBR connection with a 

20 large maximum end-to-end delay tolerance (very much like the Internet is 
today), or they may specify an ABR with a very short end-to-end maximum 
end-to-end delay tolerance, this is needed for interactive gaming over Internet 
for example. Further a downstream connection may specify a VBR 
connection with desirable bandwidth, but with very low cell loss, very tight 

25 jitter bounds, and not much care for end-to-end delay, which is very well 
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suited for downstream digital video. ATM networks support a variety of 
combinations of services classes and QoS. User requirements may be 
communicated to the ATM network via User Network Interface (UNI) 
signaling for Switched Virtual Circuits (SVCs), or via administrative 
5 provisioning for Permanent Virtual Circuits (FVCs), or indirectly through 
other signaling means. It should be noted that indirect methods may be used 
to communicate user signaling needs, these methods include: the automatic 
sensing of packets meeting certain criteria, where the packets are examined 
which flow through an observation and control point in the system, and a 

1 0 change to a particular type of packet service flow (e.g. a voice over IP 
telephone session starting or stopping) would affect a bandwidth or QoS 
change to the underlying bearer service; an out of band users interfaces, such 
as a web server home page, where a user could connect using their standard 
web browser client software, and affect a QoS change to the services they are 

1 5 receiving over a cable modem to their home; or via a proxy signaling 

technique, where at the application layer or transport layer (e.g. via an API) a 
specific protocol message could be interpreted for service class or QoS 
requirements, where a proxy agent could observe these needs, and produce 
UNI signaling appropriate for the underlying bearer service. The mechanism 

20 by which the subscriber (user) can directly or indirectly affect a change to the 
QoS of their delivered service will be called the "QoS Knob" is this disclosure. 
It is noted that the QoS Knob can be implemented by a variety of direct and 
indirect means as mentioned above. 
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A "Subscriber Terminal (STU)" is a device typically located at the home 
of a CATV network subscriber. A Subscriber Terminal Unit receives 
information and instructions via signals received on one or more downstream 
channels by the headend controller A Subscriber Terminal Unit transmits 
5 information and replies via signals one to more upstream channels to the 
headend controller. Typical CATV signals enter and exit the Subscriber 
Terminal via coaxial cable . It is envisioned that future Subscriber Terminal 
Units will exchange information with the headend controller via the 
individual or combined use of either traditional coaxial cable, AM modulated 

1 0 optical fiber, digitally modulated optical fiber, or wireless links. In the 
preferred embodiment, a Subscriber Terminal Unit to one or more Home 
Equipment via one or more physical media links, such as twisted-pair copper 
( e.g. Ethernet), traditional coaxial cable, fiber optic cable, or wireless; or the 
Subscriber Terminal Unit connects to the Home Network. It is noted that a 

1 5 Subscriber Terminal Unit may support more than one type of physical link 
and connect to a digital telephone using a wireless link. 

In the preferred embodiment, a "Cable Modem" (CM), is Subscriber 
Terminal Unit which connects to one or more Home Computing Equipment 

20 (e.g. personal computers) via one or more physical link connections. A Cable 
Modem supplies a Cable Modem Service to a Home Computing Equipment. 
A Subscriber Terminal Unit may simultaneously support both a Cable 
Modem Service together with other services such as a telephone connection to 
a Home Equipment telephone or a video service to a Home Equipment digital 

25 television. In the preferred embodiment, a cable modem receives 
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downstream signals via a single downstream channel and transmits upstream 
signal via a single upstream channel. It should be noted that a cable modem 
could support a plurality of downstream channels or a plurality of upstream 
channels. 

"QPSK" refers to Quadrature Phase Shift Keying modulation, which is 
a well known encoding and decoding method for digital data. QPSK 
produces a digital bit carrying gain of 2 bits per Hertz. 

An "upstream signal" embodies both a modulation and demodulation 
means by which digital information is encoded in an upstream form suitable 
for transmission over the upstream transmission segment media, transmitted 
by the cable modem, and ultimately decoded in a manner suitable for 
reception and processing by the headend controller. The upstream form is 
one of or a combination of a common variety of modulation techniques suited 
to the transmission medium such as, but not limited to, Quadrature Phase 
Shift Keying (QPSK), Quadrature Amplitude Modulation (QAM); or other 
advanced modulation techniques such as, but not limited to, Code Division 
Multiple Access (CDMA), Spread Aloha, or other orthogonal based system 
such as Discrete Multitone (DMT); or other technique suitable to modulating 
signals through optical fiber. An upstream distribution system may provide 
conversion from one upstream media to another on a segment by segment 
basis. One example is coaxial cable in the home, to AM fiber in the upstream 
distribution network, and back to coaxial cable in the headend. 
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"Upstream" refers to the direction of communications form the 
subscriber home of small business to the CATV head-end. 

A "upstream channel" embodies the spectral bandwidth, frequency, 
and other spectral characteristics required for transmitting and amplifying a 
upstream signal through the upstream signal through the upstream media. 

In the preferred embodiment, "upstream latency" (or upstream 
channel pipeline delay) refers to the time delay experienced by a packet as is 
traverses the upstream channel Upstream Latency is objectively measured 
between a transmission reference point in the Subscriber Terminal Unit and a 
reception reference point in the head-end controller. Upstream Latency is 
subjectively measured by users as a perceivable component of response time. 
Upstream Latency is a combination of both fixed and variable time delay 
components, including, but not limited to, Forward Error Correction 
processing delay and over-the-cable propagation delay and upstream channel 
scheduling and access delay. Different Forward Error Correction techniques 
have different amounts of burst protection and subsequently different 
amounts of end-to-end pipeline delay. In general, the wider the burst 
protection, the burst protection, the longer the upstream delay. 

In the preferred embodiment, a Media Access Control (MAC) Domain 
is an association of one or more downstream channels with one or more 
upstream channels for the purposes of 1) allocating downstream data 
resources to one or more cable modems, 2) allocating upstream data resources 
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to one or more cable modems, 3) providing a means by which cable modem 
service requests, management messages, and user data can be received from 
an upstream channel, and 4) providing a means by which resource grants, 
management messages, and user data can be transmitted on a downstream 
5 channel. A MAC domain has associated with it one or more scheduler 

functions which process service requests and user data flow observations in 
order to allocate downstream and upstream data resources in a fair manner to 
allow participating cable modems. In general, the downstream and upstream 
channels of a MAC domain will usually share the same MAC packet formats; 

1 0 i.e., ATM cells, variable length packets, or combinations of ATM cells and 

variable length packets. There is usually MAC specific overhead information 
associated with each of the data format types. It is noted that a MAC domain 
may support the delivery of integrated services: the transport of any 
combination of voice, video, data, and interactive games. It is noted that a 

1 5 MAC domain may provide service beyond high speed data to cable modems, 
that is interactive services to television, telephone, and other subscriber home 
appliances. It is noted that a headend controller may support more than one 
MAC domain service. In this case, there will be a disjoint (non-overlapping) 
set of downstream and upstream channels associated with each MAC 

20 domain. It is noted that hybrid combinations may exist, although not 

practical; that is a cable modem may participate in the downstream channel(s) 
from one MAC domain, yet participate in the upstream channels) of another 
MAC domain. 



CONFIDENTIAL 



29 



"A virtual network or Virtual Private Network (VPN) is a facility based 
on a circuit switched network or packet switched network (with sufficient 
multiplexing capability) that gives the user the appearance of a private 
network for a given service (e.g. telephone or data networking). The virtual 
5 network is dynamically configured in the sense that the cable operator or the 
user provides entries into a database used by the cable operator to configure, 
manage, monitor, and report on the operation of the network* VPNs are 
characterized by flexibility, a rich set of features, a high degree of operator 
control, and an ability to be changed quickly based on operator or customer 

1 0 needs. In the preferred embodiment, a VPN is taken to be a group of users 
sharing a OSI Layer 2 network, e.g. Ethernet or IEEE 802.3 network. One user 
of the group may be the cable operators networking interface to external 
routing and /or switching equipment. The number of customers in a VPN 
group may be as small as one and as many as the number of customers 

1 5 receiving high-speed data services from the cable operator. A customer's 
Subscriber Terminal Unit or cable modem may belong to one or more VPNs. 
The customer's home computing equipment may belong to one or more 
VPNs. The customers home equipment VPN assignments may be different 
that the Subscriber Terminal Unit or cable modem VPN assignments; that is a 

20 Subscriber Terminal Unit or cable modem may support multiple home 
equipment, which each equipment operating in a different VPN, or 
combinations of the home equipment operating in the same VPNs. The 
deployment and configuration of VPNs over a CATV plant are independent 
of the downstream channels and upstream channels being serviced by the 

25 headend controller. The deployment and configuration of VPNs over a 
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CATV plant are independent of the number of MAC domains being serviced 
by the headend controller. It is noted that the OSI Layer 2 VPN presented 
here can be extended to support an OSI Layer 3 networking Virtual Logical IP 
Subnet (VLIS) in a straightforward manner. It is noted that a VPN also 
5 applies to circuit switched services, such as telephony and video 

teleconferencing. In the case of a telephony service VPN, it could be a centrex 
group or a local PBX group, an Off Premise Extension (OPX) group, etc. In 
the case of video teleconferencing, a VPN may be used for a local conference 
group or meeting. 

10 

Referring to Figure 1, a head-end communication controller 103 
coupled to the subscriber terminal units 106 in a cable television network 104 
is shown. A backend LAN/WAN packet network 101 transmits and receives 
packet data to/from the headend controller 103 over a network interface 102. 

1 5 These packet data correspond to exclusive or combination of Ethernet, ATM 
(including SONET, D353, or Tl), FDDI, or voice (TR303, TR57, or TR08) 
protocols. The headend controller 103 facilitates communications, both 
upstream and downstream, and is responsible for all bandwidth management 
and all resource management, including modulation, frequency, bandwidth, 

20 and power assignment. The headend controller prioritizes upstream ATM 
cells. Moreover, it also converts packet data into ATM cells and assigns 
virtual connection to each individual ATM cell This virtual connection 
information allows individual cells to be prioritized for transmission. In 
addition, the virtual connection information is used to identify one or more 

25 subscriber terminal units (STUs) which are to receive the particular cell. More 
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specifically, the virtual connection information identifies particular circuits 
within designated STUs to which an individual ATM cell is to be routed. The 
ATM cells are then sent as one or more RF signals over the bi-directional 
CATV distribution network 104. The CATV distribution network 104 consists 
5 of standard coaxial cable, hybrid fiber-coax (HFC) cable, or fiber optic cables. 
Cables 105 provide physical links to multiple subscriber terminal units, such 
as STUs 106. Local packet links 108 are used to establish communications 
between the STUs 106 and personal computers 107. 



10 In summary, packet data originating from backend LAN/ WAN 

network 101 are sent to the headend controller 103 and converted into ATM 
cells. These ATM cells are prioritized and routed according to their 
respective virtual connections and sent downstream as RF signal(s) over the 
CATV network 104. The target STU(s) 106 demodulate the RF signal(s), 

1 5 convert the ATM cells into data packets, and forwards the packet data to PCs 
107. Conversely, a number of PCs 107 may forward packet data to their 
respective STUs 106. The packet data are converted into ATM cells and 
transmitted upstream in a slotted burst mode over the CATV network 104 to 
the headend controller 103. The ATM cells are then converted back into 

20 packet data which are sent on to the LAN/WAN network 101. 

Figure 2 illustrates a Hybrid Fiber-Coax Cable TV distribution network 
with a headend network 201 and the placement of the head-end 
communications controller 103 and subscriber terminal units 106. The 
25 headend network 201 consists of a headend digital communications controller 
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103 for controlling all digital data traffic, both to the fiber terminal 205 via 
coaxial links 202 and 204 and from the fiber terminal 205 via coaxial links 203 
and 207. Traditional analog TV programming by block 208 can be supported 
as well by transmitting the RF television signals over lines 206 and 204 to the 
5 fiber terminal 205. Fiber terminal 205 is used as an interface to the fiber node 
211. Amplitude modulated fiber cables 209-210 provide the connections 
between the fiber terminal 205 and fiber node 211. A plurality of junctions 
213-215 splitting off from fiber node 211 form a coaxial distribution network 
for routing signals to/from a number of STUs 106 and television sets and set- 

1 0 top boxes 212. For example, STU 106 is connected to fiber node 211 via line 
105, line extender /amplifier 214, line 216, line extender/amplifier 215, and 
line 101. Likewise, a television set or set-top box 212 is connected to the fiber 
node 211 via coupler 213, line 105, line extender/amplifier 214, line 216, line 
extender/ amplifier 215, and line 101. The delineation between the various 

1 5 stages of a traditional headend all coax internal distribution, analog fiber 
distribution network, existing or new all coax distribution, and subscriber 
homes /offices is shown in this figure. 

Figure 3 illustrates the connection of downstream 301 and upstream 
20 channels 302-304 between the headend controller 103 and the subscriber 
terminal units 106. The headend controller (HCX) 103 is comprised of an 
HCX controller port card 310 which allows an external device/network to 
direct and monitor the operations of the HCX, including placing of STUs on 
channels, moving STUs from channel to channel, managing system 
25 bandwidth resources, and maintaining the station provisioning database. A 
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number of ether net controller port cards 311 (also referred to as Ethernet root 
controllers) are used to provide an interface between the HCX 103 and a 
number of Ethernet signals. The ethernet communications is routed 
according to the command ATM switch 305. One or more RF signals 
5 containing ATM cells are sent by the transmit channel port card 313 to the 
various STUs 106 via the downstream channel 301. Although only one 
downstream channel is shown, other embodiments include multiple 
downstream channels. Individual ATM cells are routed to their intended 
destinations according to their respective virtual path identifiers (VPIs). The 

1 0 VPIs are included as part of the ATM cells. For example, VPI101 is used to 
identify the left STU; VPI102 is used to identify the middle STU; and VPI103 
is used to identify the right STU. Any number of upstream channels 302-304 
may be used by the STUs 106 to transmit signals to the HCX 103. A specific 
feature of the present invention is that if more than one upstream channel is 

1 5 active for that head-end controller on a given physical cable plant return, then 
stations may be hopped from one upstream channel to another. For example, 
VP103 may be hopped onto upstream channel 304 in lieu of the regular 
upstream channel 302 via VPI103 and line 319. This behavior is under control 
of the head-end and will be used for load balancing, or to move stations to a 

20 cleaner upstream channel in the event of severe noise impairments, etc. The 
receiver channel port cards 306 are used to receive slotted, burst RF signals 
containing ATM cells from each of the upstream channels. It should be noted 
that the cards 306, 3310, 311, and 313 are all connected to a common ATM 
switch 305 via links 307-309. 

25 
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Figure 4 is a detailed schematic of the circuitry (transmitter channel 
port card) in the headend controller used for processing downstream 
transmissions. ATM cells containing packet data arrive from an outside 
source (e.g., a computer network) via the common ATM switch on line 307. 
5 These ATM cells are input to an ATM network interface 402 which converts 
the cells from a format corresponding to the interconnect of the common 
ATM fabric to a format corresponding to the card (e.g., a conversion from 
sonic or ATM25 twisted pair connection to a bus signals appropriate for a 
printed circuit board). The ATM cells are then sent over line 403 to be 

1 0 processed by the ATM cell processor 404 which performs a Header Error 
Check (HEC); selects an encryption index; generates a time stamp; and 
generates a management report. The ATM cells and the encryption index are 
sent to a Data Encryption Standard (DES) encryption and key handler block 
405 which encrypts the ATM cell payload according to an encryption key. 

1 5 The encryption key is supplied by referencing the header and encryption 
index to an encryption key table 408. A forward error correction processor 
407 provides error correction capability (e.g., CRC) for individual ATM cells. 
The resulting serial bit stream is then modulated by a 64/256 QAM 
modulator 408. The modulated intermediate frequency (IF) signal is 

20 converted to a radio frequency (RF) signal by IF to KF converter 409 for 

downstream transmission over the CATV network. In the currently preferred 
embodiment, the RF signal corresponds to 88 to 800 MHz. Before 
transmission, the RF signal is amplified and automatic level control is 
performed by block 410. In the currently preferred embodiment, the power 

25 level of the RF signal is maintained at +20 to +60 dBmv. The downstream RF 



CONFIDENTIAL 



35 



channel is managed as a one-to-many system in that the headend has one 
transmitter and each station has one receiver. There can be many stations 
participating on that single downstream channel. Each station is addressed 
separately (unicast), via a group address (multicast), or via an all stations 
5 broadcast (broadcast). The details on station addressing are presented later in 
this description. 

Referring back to block 404, the time stamp being generated 
corresponds to an inverted HEC value at periodic intervals. Alternatively, an 

1 0 ATM cell can be embedded with a unique time stamp in its pay load. In 

order to generate the time stamp, the time stamp generator receives a timing 
signal on line 413 from the MAC /PHY time reference block 412. In addition, 
this same timing signal is delayed by variable delay block 415 and sent via 
line 416 to the receiver channel port cards operating with the transmitter card 

15 in the MAC scheduling domain. The variable delay is set specifically to 
correlate with the round trip time of the system (e.g., end-to-end delays 
including the FEC processing time in the head end, downstream propagation 
time, FEC processing time in the cable modem, processing time through the 
cable modem, upstream FEC processing time, upstream propagation delay, 

20 and upstream demodulating processing time). This delayed timing signal is 
used by the receiver port cards as part of the ranging scheme. 

The ATM End of PDU Report signal on line 411 is generated as part of 
the management report. Header information corresponding to ATM cells are 
25 examined to determine whether that cell contains an End of PDU (Protocol 
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Data Unit) bit that has been set. If the cell's End of PDU bit is set, a report 
message is generated stipulating that an End of PDU was detected. The 
report also contains a time stamp and that cell's VPI and VCI. This message i 
used for scheduling purposes. 

The report signal of line 411 consists of one or more messages 
packaged within one or more ATM cells. The operation of the Management 
Report Generator 404 has been detailed sufficiently to enable description of 
the predictive scheduling invention described later in the embodiment. The 
specific mechanisms used to generate the end of PDU report can be simple, 
that is anytime an AAL5 end of pdu bit is sampled in the ATM cell flow, or 
may be more complex to examine only certain VCI values for certain VPI 
values. Such discrimination would be necessary to only enable this report 
feature on select VCI pertaining to one or more specific STUs out of the set of 
aH STUs. 



Figure 5 shows a detailed schematic diagram of the headend controller 
used for processing upstream transmissions. An upstream receiver processor 
is shown as block 501. One or more RF signals received from the CATV 
network are input via line 502 to the headend controller. A tuner 502 is used 
to tune in the frequencies of interest. In the currently preferred embodiment, 
this corresponds to 5 to 42 MHz. The IF signal output from the tuner is 
demodulated by a QPSK/QAM burst receiver 504. The demodulated serial 
bit stream containing the ATM cells is then sent to the Forward Error 
Correction Processor 505. The output from FEC processor block 505 includes 
ATM cells, an encryption index, queue length, and reception quality data 
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(e.g., received error-free, received with correctable error, or received with 
incorrectable error). This information is sent to the HEC Verify block 506. 

Another input to Upstream Receiver Processor 501 is the upstream 
5 channel MAC/PHY time reference signal from line 416 which is input to the 
Upstream Time Base Generator 511. Generator 511 accepts the timing signal 
from the transmitter card and generates a PHY time signal, a slot time signal, 
and a time stamp signal. The PHY time signal is input to the QPSK/QAM 
Burst Receiver 504 on line 512 and is used to perform ranging. The slot time 
1 0 signal is sent to the Burst Type Table and Slot Counter 515 via line 514. Burst 
Type Table and Slot Counter 515 tracks the number of slots, slot sizes, and the 
number of slots per burst on the upstream. It also determines the type of 
burst that is received. This information is sent via line 516 to the QPSK/QAM 
Burst Receiver 504 so that it can set its demodulator and equalizer to 
1 5 specifically receive that particular burst type. The HEC Verify block 506 also 
receives this information. 

The HEC Verify Block 506 also includes a DES (CFB) Decryptor, a Key 
Handler, a Time Offset Generator, and a Management Report Generator. The 

20 HEC Verify Block 506 outputs a header and encryption signal to the 

Decryption Key Table; ATM cells to the ATM Network Interface 509 on line 
508; and a signal containing slot occupancy, station requests, and 
management reports also to the ATM Network on line 510. The header and 
encryption index signal is used to index encryption key table 507 in order to 

25 determine the proper encryption key. Based thereon, the HEC Verify block 
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506 can output ATM cells to the ATM network interface 509 which converts 
the data into packets for output to an external device or network via line 308. 
The slot occupancy, station requests, and management reports signal on line 
510 contains information regarding whether a slot assigned to a particular 
cable modem for transmission was actually utilized by that cable modem and 
whether, during a contention opportunity, a cable modem transmitted, no 
cable modem transmitted, or RF energy detected, no discernible data 
occurred. The power level of a slot that was received is supplied by the 
QPSK/QAM Burst Receiver 504 on line 518. In addition, station requests 
generated as part of the normal request grant protocol are included in the 
management reports. These station requests include those requests which 
arise in contention opportunities as well as "piggy-backing" requests which 
are formed in response to the queue length identifier of block 505. 

Figure 6 shows a detailed schematic diagram of the processing of a 
downstream transmission by a cable modem RF to ATM receiver 608. The 
downstream RF signal sent from the headend controller over the CATV 
network on line 601 is received by the Tuner 602. In the currently preferred 
embodiment, Tuner 602 is tuned to the frequency range of 88 to 800 MHz 
which matches the frequency corresponding to the converter in the headend 
controller. The IF signal from the tuner 602 is demodulated by the 64/256 
QAM Demodulator 604. The resulting serial bit stream containing the ATM 
cells are checked by the Forward Error Correction Processor 604. The ATM 
cells and encryption index from processor 604 is the verified and decrypted 
by block 605. This is accomplished by referencing the Encryption Key Table 
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606 with the VPI and encryption index. Based thereon, the appropriate 
encryption key is supplied to block 605. The decrypted ATM cells can then be 
sent on for further processing on line 607. The simplicity of this system is 
used to illustrate the function of the mechanism. Other mechanisms, such as 
examining specific bit fields and values in the packet headers taken together 
or not with the encryption index, can lead to similar functional behavior. The 
specific novelty of the approach in this embodiment is that the encryption key 
is selected based firstly upon implicit or explicit values contained in the data 
being sent to the STU or in the data received from an STU and secondly, upon 
information contained in a key lookup table. For the purposes of consistency 
in this descriptive embodiment, the VPI value together with the encryption 
index values forms the basis for the key table lookup. 

Figure 7 is a detailed schematic of the circuitry in a cable modem used 
for processing upstream transmissions by the cable modem ATM to RF 
transmitter 711. ATM cells on line 701 are input to block 703. Furthermore, a 
queue length is also input to block 703 on line 702. Based on this information, 
processor 703 provides the ATM cells with the appropriate VPI, encodes the 
HEC bits, and encrypts the ATM cells. The ATM cells, encryption index, and 
queue length are sent to the DES Encryption and Key Handler block 704 
which encrypts the ATM cell payload according to an encryption key. The 
encryption key is supplied by referencing the VPI and encryption index to an 
Encryption Key Table 705. A Forward Error Correction Processor 706 
provides standard ATM cell header error check processing and forward error 
correction processing for the burst transmission. The resulting serial bit 
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stream is then modulated by a QPSK Burst Transmitter 707. The modulated 
intermediate frequency (IF) signal is converted to a radio frequency (RF) 
signal for downstream transmission over the CATV network by Converter 
block 708. In the currently preferred embodiment, the RF signal corresponds 
5 to 5 to 42 MHz. Before transmission, the RF signal is amplified and automatic 
level control is performed by Amplifier and AGC block 709. In the currently 
preferred embodiment, the power level of the RF signal is maintained at +0 to 
+60 dBmv. The upstream RF channel is managed as a many-to-one system in 
that multiple STUs may transmit to the headend controller. 

10 

A detailed description of the Distributed Hierarchic Ethernet Switch is 
now presented. The hierarchic Ethernet switch supports the bi-directional 
exchange of Ethernet frames between a common Ethernet interface connected 
to an Ethernet Root Controller ("controller"). Common Ethernet interfaces 

1 5 are connected to a plurality of Ethernet Leaf Processors ( "stations"). The 
controller is connected to a plurality of stations via a common distributed 
ATM network, which is comprised of commonly available ATM switches 
interconnected via commonly available ATM links. The ATM cell virtual 
connections and Ethernet information flow is organized as a strict tree based 

20 ordered hierarchy, whereby the controller serves as the root to each station. 
Information flow from the controller to one or more stations is defined as the 
"downstream" direction. Information flow from a station to the controller is 
defined as the "upstream" direction. A virtual connection is defined to be a 
configured unidirectional ATM cell path through the ATM network, using 

25 common ATM semantics. It is based on the ATM cell Virtual Path Identifier 
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(VPI) value and the Virtual Circuit Identifier ( VCI) value, A virtual 
connection is indicated by "VCxx,yy", where "xx" represents the VPI value, 
and "yy" the VCI value. For example, VC1,10 means a virtual connection 
with a VPI value of 1 and a VCI value of 10. 

5 

The downstream information flow supports unicast information flow. 
In other words, flow that is from the controller to a single station. Unicast 
information flow is directly supported by use of ATM point-to-point virtual 
connections. Multicast information flow is also supported, that is from the 

1 0 controller to any preselected group of two or more stations. Multicast 

information flow is directly supported by use of ATM point-to-multipoint 
virtual connections with the controller being the source of the virtual 
connection and with two or more stations being receivers in the multicast 
group. And broadcast information flow is also supported, that is from the 

1 5 controller to all stations. Broadcast information flow is directly supported by 
use of a single ATM point-to-multipoint virtual connection with all stations 
being members of the multicast group. The upstream information flow 
supports unicast only, that is from the station to the controller. The strict 
hierarchy of the inventive method requires that all information flow from one 

20 station to another to pass through the controller. In one embodiment of the 
present invention, a station with a single Ethernet interface, exchanges 
Ethernet information with "a single controller only. The set of all stations that 
communicate with the controller and the controller is defined to be an 
Ethernet Local Area Network (LAN) segment. 

25 
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Figure 8 schematically illustrates the Ethernet Root Controller 802 
connected to Ethernet Leaf Processor #1 804, Ethernet Leaf Processor #2 804, 
and Ethernet Leaf Processor #3 804 via an ATM network comprised of 
commonly available ATM Switches: ATM Switch #1 803, ATM Switch #2 803, 
and ATM Switch #3 803 interconnected via commonly available ATM cell 
links 807. The Ethernet Root Controller 802 is connected to ATM Switch #1 

803 via a commonly available ATM link 806. Ethernet Leaf Processor #1 804 
and Ethernet Leaf Processor #2 804 are each connected to ATM Switch #2 803 
via commonly available ATM links 808. Ethernet Leaf Processor #3 804 is 
connected to ATM Switch #3 803 via ATM link 808. An Ethernet Interface 801, 
operating in promiscuous mode, connects to Ethernet Root Controller 802, 
and transfers all Ethernet frames received on the Ethernet Interface 801. An 
Ethernet Interface 805 connects to Ethernet Leaf Processor 804. 

Unicast information from the controller 802 to Ethernet Leaf Processor 
#1 804 is transmitted on VC1,10 813 at the controller 802 and carried through 
the ATM network 803 and delivered to the Ethernet Leaf Processor #1 804 on 
VC1,10. Unicast information from the Ethernet Leaf Processor #1 804 to the 
controller 802 to is transmitted on VC1,10 at the Ethernet Leaf Processor #1 

804 and carried through the ATM network 803 and delivered to the controller 
802onVCl,10 814. 



A second virtual connection is shown supporting unicast information 
from the controller 802 to Ethernet Leaf Processor #1 804, transmitted on 
VC1,11 822 at the controller 802 and carried through the ATM network 803 



CONFIDENTIAL 



43 

and delivery to the Ethernet Leaf Processor #1 804 on VCl/LL A second 
virtual connection is shown supporting unicast information from the Ethernet 
Leaf Processor #1 804 to the controller 802 to is transmitted on VC1,11 at the 
Ethernet Leaf Processor #1 804 and carried through the ATM network 803 
and delivered to the controller 802 on VC1,11 823. 

Unicast information from the controller 802 to Ethernet Leaf Processor 
#2 804 is transmitted on VC2,10 817 at the controller 802 and carried through 
the ATM network 803 and delivered to the Ethernet Leaf Processor #2 804 on 
VC2,10. Unicast information from the Ethernet Leaf Processor #2 804 to the 
controller 802 to is transmitted on VC2,10 at the Ethernet Leaf Processor #1 
804 and carried through the ATM network 803 and delivered to the controller 
802 on VC2,10 815. Unicast information from the controller 802 to Ethernet 
Leaf Processor #3 804 is transmitted on VC3,10 819 at the controller 802 and 
carried through the ATM network 803 and delivered to the Ethernet Leaf 
Processor #3 804 on VC3,10. Unicast information from the Ethernet Leaf 
Processor #3 804 to the controller 802 to is transmitted on VC3,10 at the 
Ethernet Leaf Processor #1 804 and carried through the ATM network 803 
and delivered to the controller 802 on VC3,10 821. 

Multicast information from the controller 802 to both Ethernet Leaf 
Processor #1 804 and Ethernet Leaf Processor #2 804 is transmitted on VC4,12 
816 at the controller 802 and carried through the ATM network 803 and 
delivered to the Ethernet Leaf Processor #1 804 on VC4,12 and delivered to 
the Ethernet Leaf Processor #2 804 on VC4,12. ATM Switch #2 803 performs a 
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common ATM cell copy operation 809 to support the point-to-multipoint 
operation. Multicast information from the controller 802 to both Ethernet 
Leaf Processor #2 804 and Ethernet Leaf Processor #3 804 is transmitted on 
VC5,13 818 at the controller 802 and carried through the ATM network 803 
and delivered to the Ethernet Leaf Processor #2 804 on VC5,13 and delivered 
to the Ethernet Leaf Processor #3 804 on VC5,13. ATM Switch #1 803 
performs a common ATM cell copy operation 810 to support the point-to- 
multipoint operation. 

Broadcast information from the controller 802 to all stations, 
specifically Ethernet Leaf Processor #1 804, Ethernet Processor #2 804, and 
Ethernet Leaf Processor #3 804, is transmitted on VC6,14 820 at the controller 
802 and carried through the ATM network 803 and delivered to the Ethernet 
Leaf Processor #1 804 on VC6,14 and Ethernet Leaf Processor #2 804 on 
VC6,14 and delivered to the Ethernet Leaf Processor #3 804 on VC6,14. ATM 
Switch #1 803 performs the first common ATM cell copy operation 811 and 
ATM Switch #2 803 performs the s second ATM Cell copy operation 812 to 
support the point-to-multipoint operations necessary to include all stations in 
the multicast group. 

It should be noted that more than one controller and many stations 
may be connected to the ATM network. The nature of ATM networking 
allows many simultaneous virtual connections to be established across the 
network, thereby allowing each controller to communicate with a subset of all 
stations; such that each station communicates with only a single controller 
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and that all stations are configured to communicate with a controller. Each 
controller therefore defines a virtual Ethernet LAN segment and many 
segments many operate through the same ATM network simultaneously. 
Furthermore, commonly available ATM Switches can support an arbitrary 
number of receivers in a pomt-to-multipoint group. Additionally, an 
arbitrary number of unicast virtual connections may be established through 
the ATM network to the same ATM endpoints. 

Consequently, ATM cells are capable of being routed to a cable modem 
on a virtual connection basis. Furthermore, ATM cells are capable of being 
transmitted from a cable modem on a virtual connection basis. The ATM cells 
are capable of being prioritized according to a virtual connection basis, Ttris 
is accomplished in the same manner as described above for a distributed 
Ethernet switch. 

Figure 9 schematically illustrates an exemplary Ethernet Root 
Controller 802. Ethernet frames are received over a commonly available 
Ethernet Interface 801 where they are received by a common Ethernet 
Controller 901. Ethernet frames are then transferred 921 to the 3-Port 
Multiprotocol Learning Bridge and Forwarder 902 (hereafter referred to as the 
"Root Forwarder"). Upon receiving a Ethernet Frame from Port 1 921, the 
Root Forwarder 902 constructs a query 906 comprised of information 
obtained from the Ethernet Frame. Specifically, this includes the Destination 
Address ("DA"), the Source Address ("SA"), and the Ethernet Type field 
("ETYPE"), additionally the port number that the Ethernet frame was 
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received on, the first 64 octets of the Ethernet frame data or the entire data if 
less than 64 octets, the encapsulation type set to "null", and the VPI and VCI 
set to 0. This query on line 906 is received by the Bridge Table Processor 907 
which performs a table lookup function based upon the information in the 
5 query. The Bridge Table Processor 907 returns a response on line 908 to the 
Root Forwarder comprised of the forwarding port number, the VPI and VCI 
values for the ATM virtual connection, the ATM encapsulation type, a 
priority indication, a virtual LAN identifier, the destination address and the 
source address. 

10 

If the DA of the received Ethernet frame was received from Port 1 921, 
and indicated a unicast address of an Ethernet device connected to the 
Ethernet Interface 805 at Ethernet Leaf Processor #1 804. And if the 
EtherType value of the Ethernet frame indicated a specific type or set of 

1 5 types, the virtual connection is identified as VC1,11 S22 and the Port number 
set to 2, otherwise the virtual connection is identified as VC1,10 813 and the 
Port number set to 2. This mechanism demonstrates that received Ethernet 
frames of different Ethernet types may be transmitted via different virtual 
connections downstream from the controller 802 to the same Ethernet Leaf 

20 Processor #1 804. 

However, if the DA of the received Ethernet frame was received from 
Port 1 921, and indicated a multicast address whose members included 
Ethernet devices connected to the Ethernet Interface 805 at Ethernet Leaf 
25 Processor #1 804 and to the Ethernet Interface 805 at Ethernet Leaf Processor 
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#2 805, the virtual connection is identified as VC4,12 816 and the Port number 
set to 2. If the DA of the received Ethernet frame was received from Port 1 
921, and indicated a broadcast address, the virtual connection is identified as 
VC6,14 820 and the Port number set to 2. The Bridge Table Processor 907 
5 follows the learning bridge forwarding semantics commonly found in the 
IEEE 802.1D standard. The encapsulation type response is "null" for Ethernet 
Frames, or "RFC1483-null" if the Ethernet frame contained an Internet 
Protocol ("IP") datagram and the Internet Engineering Task Force (IETF) 
RFC1483 standard for null encapsulation was selected, or "RFC1483- 

1 0 LLCSNAP" if the Ethernet frame contained protocol packet of ETYPE and the 
IETF RFC1483 standard for LLC/SNAP encapsulation was selected. For 
Ethernet frames received from Port 1 921, if the response port number was 2 
in 908, the Ethernet frame, the virtual connection information, and the 
encapsulation type is communicated 903 to the ATM AAL5 Segmentation 

1 5 Processor 904. If the port number contained in the response 908 indicated 
Port 0, the Ethernet frame is discarded. 

The ATM AAL5 Segmentation Processor 904 is responsible for 
receiving packets, virtual connection, and encapsulation information 903 from 

20 the Root Forwarder 902 and converting the packets into a stream of ATM cells 
consistent with the commonly available ATM Adaptation Layer 5 ("AAL5") 
segmentation semantics. Ethernet frames are encapsulated using a null 
encapsulation. Non Ethernet Packets are processed according to the 
encapsulation information 903 passed from the Root Forwarder 902. Packets 

25 are processed according to the encapsulation information. The virtual 
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connection information is copied to the VPI and VCI values contained in the 
ATM cells generated by the process. The ATM cells are then transmitted 905 
to the ATM Cell Scheduler & Cell Queue Memory Processor 910. Also 
included within block 904 is a Packet Examiner which performs multi- 
5 protocol filtering which filters TCP packets containing data on the 

downstream. When a packet is matching certain criteria is detected, this 
detection is sent along with the packet's VPI and VCI as a packet summary 
report within an ATM cell on line 924 to the ATM Cell Scheduler 910 and 
onto the receiver port card. The packet summary report is used for predictive 

1 0 acknowledgment scheduling processes. Note that the packet summary report 
function has been described here using the examination of TCP packets. The 
mechanism however, is general in nature, is not limited specifically to TCP 
packets, and can be used to generate reports with content specific to the 
protocols being examined; for example. ATM, Ethernet, IEEE 802.3, IEEE 

1 5 802.2, and/ or application specific protocols such as File Transfer Protocol 

(FTP) or Telnet. The specific novelty of this invention is that a general packet 
examiner can be placed within the head-end controller for shared media 
network, e.g. high speed data over CATV, and such examiner observes data 
being sent to stations in the downstream direction. Certain types of packets 

20 or specific protocol messages are indications with high probability that a 
future packet will be sent from the station to the head-end controller on the 
upstream channel. The occurrence of the downstream examination event is of 
interest to the mechanism(s) which schedule upstream resources. Note that 
this predictive examination mechanism is well suited for any communications 

25 systems which utilizes shared media with a master or head-end controller, 
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and characterized as controlling downstream channels with one transmitter 
and many receivers and independent scheduled-access upstream (return) 
channels with one receiver and many transmitters. CATV systems are the 
typical example, but this mechanism is also suited for wireless as well as 
5 satellite communications. The nature of the filter is to keep a list of filters per 
STU, such that when packets are received the filters specific to that STU are 
retrieved. This allows per STU packet filtering that can be tailored to suit the 
cable operators data networking needs. In addition, in the preferred 
embodiment of this invention, the filter performs two filter functions: 1) it 

1 0 examines Address Resolution Protocol (ARP) packets, as specified in IETF 
RFC826, and validates the IP addresses contained therein against a list of DP 
source addresses that are kept in the filter table for each STU, ARP packets 
that do not contain proper IP source addresses are discarded. With this filter 
- function ARP packets are verified per subscriber cable modem which 

1 5 prevents severe network denial of service that can be caused due to either 
unintentional or intentional mis-configured of personal computers in the 
subscriber's home; and 2) the filter maintains a list of IP source addresses, 
source address masks, IP destination addresses, and destination address 
masks. When receiving IP packets from an STU, the IP source and 

20 destination addresses in the D? packets are compared with entries in the table. 
The cable operator can tailor the list to specifically allow or specifically deny 
D? source and IP destination pairs. This filter enables cable operators to 
specifically tailor IP traffic flows based on the configuration of the system, the 
availability of the backend network, and the needs and preferences of the 

25 subscribers. 
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The ATM Cell Scheduler & Cell Queue Memory Processor 910 
performs a lookup of the virtual connection information 911 in the Quality of 
Service ("QoS") table 912 to obtain the QoS information 913, which includes 
5 the ATM traffic management service class requirements and cell delay 
requirements, for the virtual connection. The ATM Cell Scheduler 910 also 
generates an ATM End of PDU Report on line 925 to the ATM Network 
Interface which is similar to that described above in Figure 4. The ATM Cell 
Scheduler and Cell Queue Memory 910 enqueues the ATM cells appropriate 

1 0 to the QoS information, orders the cells consistent with preserving the QoS of 
ATM cells from other virtual connections that may be previously enqueued 
and transmits cells 914 to the ATM Network Interface 915 for transmission 
over the ATM link 918 to ATM switch #1 803. ATM cells received by the 
ATM Networking Interface 915 via the commonly available ATM link 918 are 

1 5 transmitted 916 to the ATM AAL5 Reassembly Processor 917. ATM cells are 
reconstituted into packets according to the commonly available semantics of 
AAL5 and the encapsulation information 920 obtained by a lookup of the 
virtual connection information 918 in the Encapsulation and ETYPE Table 
919. The packet, the virtual connection obtained from the ATM cells which 

20 carried the data, the encapsulation type, and ETYPE information are 
transmitted on line 909 to the Filter 922 which examines the packet to 
determine whether that particular packet is valid or invalid based on the 
contents of the Filter Table. Valid packets are forwarded to the Root 
Forwarder 902 on Port3 923, whereas invalid packets are discarded. This 

25 filter function can be applied to specific STUs or VCIs. 
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Upon receiving an Ethernet Frame from Port 3 909, the Root Forwarder 
902 constructs a query 906 comprised of information obtained from the 
Ethernet Frame, specifically the Destination Address ("DA"), the Source 
5 Address ("SA"), and the Ethernet Type field ("ETYPE"), additionally the port 
number that the Ethernet frame was received on, the first 64 octets of the 
Ethernet frame data or the entire data if less than 64 octets, and the 
encapsulation type. The query 906 is received by the Bridge Table Processor 
907 which performs a table lookup function based upon the information in 

1 0 the query. The Bridge Table Processor 907 returns a response 908 to the Root 
Forwarder comprised of the forwarding port number, the VPI and VCI values 
for the ATM virtual connection, and the ATM encapsulation type. If the DA 
of the received Ethernet frame was received from Port 3 909, and indicated a 
unicast address of an Ethernet device connected to the Ethernet Interface 805 

1 5 at Ethernet Leaf Processor #1 804, the virtual connection is identified as 

VC1,10 813 and the Port number set to 2. If the DA of the received Ethernet 
frame was received from Port 3 909, and indicated a multicast address whose 
members included Ethernet devices connected to the Ethernet Interface 805 at 
Ethernet Leaf Processor #1 804 and to the Ethernet Interface 805 at Ethernet 

20 Leaf Processor #2 805, the virtual connection is identified as VC4,12 816 and 
the Port number set to 2, additionally if the packet was an encapsulated 
Ethernet frame the frame is copied to Port 1 921, processed by the Ethernet 
controller 901 and transmitted via the Ethernet Interface 801. 
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If the DA of the received Ethernet frame was received from Port 3 909, 
and indicated a broadcast address, the virtual connection is identified as 
VC6,14 820 and the Port number set to 2, additionally if the packet was an 
encapsulated Ethernet frame the frame is copied to Port 1 921, processed by 
5 the Ethernet controller 901 and transmitted via the Ethernet Interface 801. If 
the DA of the received Ethernet frame was received from Port 3 909, and 
indicated a unicast address of an Ethernet device connected to the Ethernet 
Interface 801 specified as Port 1 921, the frame is transferred to Port 1 921, 
processed by the Ethernet controller 901 and transmitted via the Ethernet 
1 0 Interface 801. For Ethernet frames received from Port 3 909, if the response 
port number was 2 in 908, the Ethernet frame, the virtual connection 
information, and the encapsulation type is transferred via Port 2 903 to the 
ATM AAL5 Segmentation Processor 904. If the port number contained in the 
response 908 indicated Port C, the Ethernet frame is discarded. 

15 

Upon receiving a packet which is not an Ethernet Frame from Port 3 
909, the Root Forwarder 902 constructs a query 906 comprised of information 
obtained from received information 909, specifically the encapsulation type, 
the ETYPE, additionally the port number that the packet was received on, and 

20 the first 64 octets of the packets data or the entire data if less than 64 octets. 
The query 906 is received by the Bridge Table Processor 907 which performs a 
table lookup function based upon the information in the query. The Bridge 
Table Processor 907 returns a response 908 to the Root Forwarder comprised 
of the forwarding port number, the VPI and VCI values for the ATM virtual 

25 connection, and the encapsulation type. If the port number received in the 
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response 908 is Port 1, the packet and the ETYPE received from Port 3 909 and 
SA, and DA information returned in the response 908 is used to construct an 
Ethernet Frame which is then transferred to the Ethernet Controller 901 for 
transmission on the Ethernet Interface 801. If the port number received in the 
5 response 908 is Port 2, the packet, virtual connection, and encapsulation type 
information is transferred to the ATM AAL5 Segmentation Processor 904 via 
Port 2 903,. and if the DA value in the response 908 is non zero, a copy of the 
packet and the ETYPE received from Port 3 909 and SA, and DA information 
returned in the response 908 is used to construct an Ethernet Frame which is 
1 0 then transferred to the Ethernet Controller 901 for transmission on the 
Ethernet Interface 801. 

The Source Address ("SA") information from Ethernet Frames received 
from Port 1 921 and Port 3 909, and the virtual connection information 

1 5 obtained from Port 3 909 are used by the Bridge Table Processor 907 to 
construct a table. The table maps Destination Addresses ("DA") to Port 
number and virtual connections . Virtual connection information is not 
required for Port 1. If an SA is learned from Port 3 909, its table information 
in the Bridge Table Processor 907 will indicate Port 2 903 for forwarding 

20 purposes. Port 2 903 is a transmit only port ? Port 3 909 is a receive only port. 
The Bridge Table Processor 907 is responsible for directing the flow of packets 
through the learning bridge and forwarder 902; which also includes the 
ability to specifically discard packets meeting certain criteria. The novelty of 
this invention is that the behavior can be modeled to support a learning 

25 bridge behavior similar to IEEE 802.1D bridging, or an IEEE 802.1D bridge 
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per virtual LAN, or a semi-forwarding bridge, or a semi-forwarding per 
virtual LAN. The semi-forwarding nature allows packets to be examined and 
specifically forwarded from Port 3 to Port 2 if the packet meets certain filter 
criteria. Additionally, no packets may be forwarded from Port 3 to Port 2, 
5 creating a scenario where the distributed Ethernet switching function exists as 
seen by the Ethernet interface 801. That is, devices attached to Ethernet 
Interface 801 can exchange broadcast and unicast packets with any Ethernet 
Leaf processor 804 and vice versa, but Ethernet Leaf processors cannot 
exchange packets with the other. With this feature, cable operators can 
1 0 configure the filtering and forwarding behavior of the Ethernet Root 

Controller 802 to meet the needs of their high speed data delivery service and 
of the needs of the customers. 



Figure 10 schematically illustrates an exemplary Ethernet Leaf 
1 5 Processor #1 804. ATM cells received by the ATM Networking Interface 1002 
from ATM Switch #3 803 via the commonly available ATM link 1001 are 
transmitted to the ATM Service Processor 1026 on line 1025. Based on the VPI 
and VCI, the ATM Service Processor 1026 decides whether the ATM cells are 
to be forwarded to an external interface through line 1027 or to the ATM 
20 AAL5 Reassembly Processor 1004. In general, non-Ethernet cells (e.g., voice, 
video, graphics, etc.) are passed though on line 1027, whereas Ethernet based 
cells are forwarded on line 1003 to the Reassembly Processor 1004. In the 
ATM AAL5 Reassembly Processor 1004, ATM cells are reconstituted into 
packets according to the commonly available semantics of AAL5 reassembly 
25 and the encapsulation information 1007 obtained by a lookup of the virtual 



CONFIDENTIAL 



55 



connection information 1005 in the Encapsulation and ETYPE Table 1006. 
The packet, the virtual connection obtained from the ATM cells which carried 
the data, the encapsulation type, and ETYPE information are transmitted 1008 
to the Interdiction Packet Filter & Table 1029. The Interdiction Filter 
5 maintains an internal table of permit and deny filter entries that are 

maintained by the cable operator, no customer access is allowed to this table. 
The purpose of the filter is to restrict packet flow to the subscriber to only 
permit packets that have been assigned for reception. In unicast networking 
forwarding, this restriction function is typically met by limiting which 

1 0 packets are sent downstream to the STU. However, with this filter and the 
nature of multicast and broadcast traffic, the cable operator may be available 
to a customer on a fee basis. By specially enabling the STU to receive a 
multicast group, allows one copy of the information to be sent on the 
downstream channel, that is the downstream data bandwidth resources, and 

1 5 that only the STUs that have been enabled to receive the group are allowed 
access. 

Upon receiving an Ethernet Frame from Port 3 1008, the Leaf 
Forwarder 1009 constructs a query 1010 comprised of information obtained 
from the Ethernet Frame, specifically the Destination Address ("DA"), the 

20 Source Address ("SA"), and the Ethernet Type field ("ETYPE"), additionally 
the port number that the Ethernet frame was received on, the first 64 octets of 
the Ethernet frame data or the entire data if less than 64 octets, and the 
encapsulation type. The query 1010 is received by the Bridge Table Processor 
1011 which performs a table lookup function based upon the information in 

25 the query. The Bridge Table Processor 1011 returns a response 1012 to the 
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Leaf Forwarder comprised of a Forward True/False flag, a Received-SA-Is- 
Known-SA True/False flag, the VPI and VCI values for the ATM virtual 
connection, the ATM encapsulation type, the SA and DA values, a priority 
indicator, and the Virtual LAN identification* 

5 

If the DA of the received Ethernet frame was received from Port 3 1008, 
and indicated a unicast address of an Ethernet device connected to the 
Ethernet Interface 805 on Port 1 1015, the Ethernet frame is transferred to the 
Ethernet Controller 1016 for transmission on the Ethernet Interface 805. If the 

1 0 DA of the received Ethernet frame was received from Port 3 1008, and 

indicated a multicast or broadcast address and the Received-SA-Is-Known-SA 
flag is False, the Ethernet frame is transferred to the Ethernet Controller 1016 
for transmission on the Ethernet Interface 805. If the Received-SA-Is-Known- 
SA flag is True, the frame is discarded. In addition to a common learning 

1 5 bridge function constructed similar to that specified in the IEEE 802.1D 

standard, the Bridge Table Processor 1011 sets the Received-SA-Is-Known-SA 
flag when a query is made 1010 in which the SA appears in the bridge table as 
a SA learned from Port 1 1015. This mechanism prevents the retransmission 
of multicast and broadcast Ethernet Frames onto Ethernet Interface 805 that 

20 have originated from Ethernet Interface 805.- 



Upon receiving a packet which is not an Ethernet Frame from Port 3 
1008, the Leaf Forwarder 1011 constructs a query 1010 comprised of 
information obtained from received information 1008, specifically the 
25 encapsulation type, the ETYPE, additionally the port number that the packet 
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was received on, and the first 64 octets of the packets data or the entire data if 
less than 64 octets. The query 1010 is received by the Bridge Table Processor 
1011 which performs a table lookup function based upon the information in 
the query. The Bridge Table Processor 1011 returns a response 1012 to the 
5 Leaf Forwarder 1009 comprised of the Forward flag, SA, DA, and the 

encapsulation type. If the Forward flag is false, the packet is discarded. If the 
Forward flag is True and if the port number received in the response 1012 is 
Port 1 1015, the packet and the ETYPE received from Port 3 1008 and SA, and 
DA information returned in the response 1012 is used to construct an Ethernet 
1 0 Frame which is then transferred to the Ethernet Controller 1015 for 

transmission on the Ethernet Interface 805.1f the port number received in the 
response 1012 is value 2 or value 0, the packet is discarded. There are no 
transfers of packets or Ethernet frames from Port 3 1008 to Port 2 1013 for Leaf 
Forwarders 1009. 

15 

Ethernet frames are received over a commonly available Ethernet 
Interface 805, where they are received by a commonly available Ethernet 
Controller 1016. Ethernet frames are then transferred 1015 to the Leaf 
Forwarder 1009. Upon receiving a Ethernet Frame from Port 1 1015, the Leaf 

20 Forwarder 1009 constructs a query 1010 comprised of information obtained 
from the Ethernet Frame, specifically the DA, SA, and ETYPE, additionally 
the port number that the Ethernet frame was received on, the first 64 octets of 
the Ethernet frame data, and the encapsulation type set to "null". This query 
1010 is received by the Bridge Table Processor 1011 which performs a table 

25 lookup function based upon the information in the query. The Bridge Table 
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Processor 1011 returns a response 1012 to the Leaf Forwarder comprised of 
the Forwarding flag, the VPI and VCI values for the ATM virtual connection, 
and the ATM encapsulation type. If the EtherType value of the Ethernet 
frame received from the Ethernet Controller 1016 on Port 1 1015, indicated a 
5 specific type or set of types, the virtual connection is identified as VC1,11 822 
and the Port number set to 2. Otherwise, the virtual connection is identified 
as VC1,10 813, and the Port number set to 2. This mechanism demonstrates 
that received Ethernet frames of differing Ethernet types may be transmitted 
upstream to the controller 802 using via different virtual connections. 

10 

The Bridge Table Processor 1011 follows the learning bridge 
forwarding semantics commonly found in the IEEE 802.1D standard. The 
encapsulation type response is "null" for Ethernet Frames, or "RFC1483-null" 
if the Ethernet frame contained an Internet Protocol ("IP") datagram and the 

1 5 Internet Engineering Task Force (IETF) RFC1483 standard for null 

encapsulation was selected, or "RFC1483-LLCSNAP" if the Ethernet frame 
contained protocol packet of ETYPE and the IETF RFC1483 standard for 
LLC/SNAP encapsulation was selected. For Ethernet frames received from 
Port 1, if the response Forward flag is True in 1012, the Ethernet frame, the 

20 virtual connection information, and the encapsulation type is communicated 
to the Filter And Filter Table 1023 on line 1023. Otherwise, if the Forward flag 
value is False, the Ethernet frame is discarded. 

Filter And Filter Table 1023 provides a multi-protocol packet 
25 examination function which decides whether a packet is allowed to continue 
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upstream or whether it should be discarded. More specifically, address and 
resolution protocol packets are examined to determine whether the contents 
of an Address Resolution Protocol (ARP) request or ARP reply match that 
stored in the Filter Table. The ARP packet is used to translate a hardware 
5 address into an IP address. The Filter Table is configure by the cable operator 
to allow only authorized transmissions upstream. Hence, if Filter 1023 
determines that the packet is valid, the packet is allowed to proceed upstream 
to the ATM AAL5 Segmentation Processor 1014 on line 1024. Otherwise, if 
there is no match, the packet is discarded. Thereby, cable operators have the 
1 0 ability to control transmissions from the STUs, and unauthorized 

transmissions can be prevented. It should be noted that this filter function 
can be implemented in the Ethernet Root Controller. It should be noted that 
other packets types, such as but not limited to IP packets, can be examined by 
this filter function. 

15 

The ATM AAL5 Segmentation Processor 1014 is responsible for 
receiving Ethernet frames, virtual connection, and encapsulation information 
1013 from the Leaf Forwarder 1009 and converting the Ethernet dat3 into a 
stream of ATM cells consistent with the commonly available ATM 

20 Adaptation Layer 5 ("AAL5") segmentation semantics. The Ethernet data is 
processed according to the encapsulation information. The virtual connection 
information is copied to the VPI and VCI values contained in the ATM cells 
generated by the process. The ATM cells are then transmitted 1017 to the 
ATM Cell Scheduler & Cell Queue Memory Processor 1018 (hereafter "Queue 

25 Controller"). 
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The Queue Controller 1018 performs a lookup of the virtual connection 
information 1019 in the Queue Mapping Table 1020 to obtain the queue 
identifier ("Queue ID") number in which to place the ATM cells. The Queue 
5 Controller 1019 then enqueues the appropriate internal cell queue. The 
Queue Controller 1018 maintains many internal queues in strict priority 
number and transmits cells 1022 from the highest priority queue which has 
enqueued cells to the ATM Network Interface 1002 for transmission over the 
ATM link 1001 to ATM switch #3 803. In addition, non-Ethernet cells 
1 0 transmitted as outputs on line 1027 of another STU is accepted as an input to 
the Queue Controller 1018 on line 1028. These non-Ethernet cells are 
forwarded as ATM cells 1022 to the ATM Network Interface 1002 on line 
1022. 

1 5 The SA information from Ethernet Frames received from Port 1 1015 is 

used by the Bridge Table Processor 1011 to construct a table which records the 
source addresses contained in Ethernet Frames received via Port 1 1015. If a 
query 1010 contains a unicast DA value which matches a recorded SA value 
in the table, the Forward Flag is set to False in response 1012, indicating that 

20 Ethernet Frame should not be forwarded upstream to the Ethernet Root 

Controller 802. If the SA match is not found or if the DA specifies a multicast 
or broadcast address, the Forward flag in response 1012 is set to True. It 
should be recognized that the similarity of Ethernet with the IEEE 802.3 
standard and that 802.3 frame processing can be simultaneously supported 

25 with Ethernet frame processing. 
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Figure 11 schematically illustrates the format of a standard ATM User 
Network Interface (UNI) cell. The UNI ATM Cell 1101 is comprised of a total 
of 53 octets of information, where the first 4 bits is a Generic Flow Control 
5 (GFC) field, the next 8 bits are the Virtual Path Identifier, the next 16 bits are 
the Virtual Circuit Identifier, the next 3 bits are the Payload Type Indicator 
(PTI) field, the next bit is the Cell Loss Priority (CLP) bit, the next 8 bits is the 
Header Error Check (HEC) field. The remaining portion of the ATM cell 
comprises the 48 octet cell payload. 

10 

Figure 12 schematically illustrates the format of a standards ATM 
Network to Network Interface (NNI) cell. The UNI ATM Cell 1201 is 
comprised of a total of 53 octets of information, where the first 12 bits are the 
Virtual Path Identifier, the next 16 bits are the Virtual Circuit Identifier, the 
1 5 next 3 bits are the Payload Type Indicator (PTI) field, the next bit is the Cell 
Loss Priority (CLP) bit, the next 8 bits is the Header Error Check (HEC) field. 
The remaining portion of the ATM cell comprises the 48 octet cell payload. 

Figure 13 schematically illustrates the null encapsulation of an 
20 Ethernet Frame 1301 into an ATM AAL5 Common Part Convergence 
Sublayer (CPCS) PDU, with pad, and Trailer 1302. The variable length 
Ethernet Frame is placed into the AAL5 CPCS PDU. The AAL5 trailer 
contains both a CPCS PDU length value and a 32 bit (4 octet) Cyclic 
Redundancy Check (CRC) value. The length of the pad is adjusted according 
25 the standard AAL5 semantics so 4 octets of CRC in the trailer align with the 
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last four octets of the last ATM cell payload which contains the CPCS PDU. 
An AAL5 CPCS PDU may be segmented in UNI or NNI ATM Cells 1303 and 
1304. The ATM cell 1304 which holds the trailer has a special bit set in the FIT 
field (specifically, the SDU-type bit) which indicates the trailer is present in 
5 the payload. The segmentation process decomposes the AAL5 PDU into one 
or more ATM cells 1303 and 1304, depending on the length of the CPCS PDU. 
In the reverse process, the reassembly process, reconstructs the CPCS PDU 
from a stream of ATM cells 1303 and 1304. The CRC in the CPCS trailer is 
used to detect the correct reception of the CPCS PDU. ATM standards dictate 

1 0 that ATM cells are sent in order through the ATM network and the 
transmission order may not be rearranged. It should be noted that the 
method of encapsulating Ethernet in ATM AAL5 and selecting virtual 
connection and quality of service based on Destination Address and Ethernet 
Type can be extended to directly to support other networking protocols, such 

15 as IP, IPX, and Appletalk. Moreover, the encapsulation method as described 
in the IETF RFC1483 standard, virtual connection, and quality of service 
selection can be based on information contained in the headers or data of 
these other protocols. 

20 It is the assertion of this detailed embodiment that the methods 

presented in the description of this Distributed Hierarchic Ethernet Switch 
provide a system of operation between the Ethernet Interface 801 and all 
Ethernet Interfaces 805 consistent with the operation of a commonly available 
multiple port Ethernet switching hub. In other words, unicast, multicast, and 

25 broadcast Ethernet frames are directed to the appropriate Ethernet Interface 
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or Ethernet Interfaces 801 and 805, regardless of which Ethernet Interface 801 
and 805 received the Ethernet frame. Furthermore, it has been shown that 
different virtual connections may be used for the downstream transfer. 
Ethernet frames of differing Ethernet Types between the controller 802 and 
5 the Ethernet Leaf Processor #1 804 and that the Quality of Service and priority 
of ATM virtual connections may be separately specified on a per downstream 
virtual connection basis. 

Different virtual connections may be used for the upstream transfer 
1 0 Ethernet frames of differing Ethernet Types from the same Ethernet Leaf 

Processor #1 804 controller 802 and that the Quality of Service and priority of 
ATM virtual connections may be separately specified on a per upstream 
virtual connection basis. In addition, it has been shown that Ethernet frames 
may received from an Ethernet interface 801 and encapsulated based on 
1 5 Ethernet Type or other non-Ethernet protocol header data, then segmented 
into ATM cells, then transmitted on a virtual connection by controller 802 
downstream to the Ethernet Leaf Processor #1 804 and reconstituted into an 
Ethernet frame via the Leaf Forwarder 1009. This is based on information 
associated with the virtual connection in the Bridge Table Processor 1011. 
20 The Ethernet Frame may be transferred to the Ethernet controller 1016 for 
transmission on the Ethernet Interface 805. The Quality of Service and 
priority of ATM virtual connections may be separately specified on a per 
downstream virtual connection basis. 
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It has been shown that Ethernet frames may received from an Ethernet 
interface 805 and encapsulated based on Ethernet Type or other non-Ethernet 
protocol header data, then segmented into ATM cells, then transmitted on a 
virtual connection by Ethernet Leaf Processor #1 804 to controller 802 

5 upstream and reconstituted into an Ethernet frame via the Root Forwarder 
902. This is based on information associated with the virtual connection in 
the Bridge Table Processor 907. The Ethernet Frame may be transferred to the 
Ethernet controller 901 for transmission on the Ethernet Interface 801, and 
that the Quality of Service and priority of ATM virtual connections may be 

10 separately specified on a per upstream virtual connection basis. It is the 
assertion that the operations described for the Ethernet Controller 802 and 
Ethernet Leaf Processor #1 804 are applicable for any Ethernet Leaf Processor. 

Figure 14 shows a downstream slot structure. The Encryption Index 
1 5 (EI) is an 8-bit value conveying a four valued indication of the encryption 
status of the ATM PDU. A value of <0x00> means that the ATM PDU is not 
encrypted, <0x55> means encrypted with key 1, <0xAA> means encrypted 
with key 2, and <0xFF> means encrypted with key 3. An encryption key table 
is kept for each station identifier (individual or group) used by the station to 
20 identify ATM cells that it should receive. The Destination Station ID (DSID) 
is 12 bits long. This is the station identifier of the stations(s) to receive the 
ATM cell. The DSID overlays the Virtual Path Identifier of the ATM NNI cell 
header. The Virtual Circuit Index (VCI) is a 16-bit ATM Forum UNI 3.1 VCI 
field. The 3-bit Payload Type (PT) is the ATM Forum UNI 3.1 field. It 
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occupies bits 2-4 of octet 11 of the downstream slot. The Payload Type bits 
follow the ATM UNI 3.1 specifications: 



PTE 

Coding 

(MSB first) 


Interpretation 


000 


User data cell, congestion not 
experienced, SDU-type = 0 


001 


User data cell, congestion not 
experienced, SDU-type = 1 


010 


User data cell, congestion 
experienced, SDU-type = 0 


011 


User data cell, congestion 
experienced, SDU-type = 1 


100 


Segment OAM F5 flow related cell 


101 


End-to-end OAM F5 flow related cell 


110 


Reserved for future traffic control and 
resource management 


111 


Reserved for future functions 



Table 1: Payload Type Indicator Encoding 



The single Cell Loss Priority (CLP) bit is the UNI 3.1 CLP bit which 
occupies bit 1 of octet 11 of the downstream slot. A CLP bit = 0 indicates a 
higher priority traffic cell and a CLP bit = 1 indicates a lower priority cell. 
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Upon entering the overall system, a cell with CLP = 1 may be subject to 
discard depending on network traffic conditions. The Header Error Control 
(HEC) is a standard ATM cell HEC field. The actual data is contained in the 
Cell Payload (PDU), which is 48 octets in length. This corresponds to the 
5 normal ATM cell PDU. Finally, 6.7 octets of forward error correction are 
provided. 



Figure 15 shows an upstream slot structure. The Preamble is 4 octets 
in length and consists of a series of ones and zeros used to help identify the 

1 0 beginning of a cell slot. The preamble contains a pattern which provides the 
receiver with an identification of the start of valid data, beginning with the EI 
bits The two-bit Encryption Index (EI) 2 bits) conveys a four valued 
indication of the encryption status of the ATM PDU. A value of <0b00> 
means that the ATM PDU is not encrypted, <0b01> means encrypted with 

1 5 key 1, <0bl0> means encrypted with key 2, and <0bll> means encrypted 
with key 3. A three-key index is kept for each the station address and each 
multicast group address of which the station is a member. The Transmitter 
Queue Length (TQL) is 6 bits and is obtained from the queue length on line 
702 of Figure 7. The station places the length (as measured in slots) of the 

20 transmit queue. This field is used to communicate a bandwidth request to the 
head-end controller. The TQL value range is <0x00> through <0x3F>. The 
Station Unique Identifier (SUID) is a 12-bit value which is the station unique 
identifier of the source station of this slot; i.e., the station that transmitted this 
ATM cell. The Virtual Circuit Index (VCI) is (16 bits) corresponding to an 

25 ATM Forum UNI 3.1 VCI field. The Payload Type (PT) is 3 bits and 
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corresponds the ATM Forum UNI 3.1 field. The PT field occupies bits 2-4 of 
octet 11 of the upstream slot. The Cell Loss Priority (CLP) bit corresponds to 
the UNI 3.1 CLP bit. The CLP bit occupies bit 1 of octet 11 of the upstream 
slot. A CLP bit = 0 indicates a higher priority traffic cell and a CLP bit = 1 
5 indicates a lower priority cell. Upon entering the system, a cell with CLP = 1 
may be subject to discard depending on network traffic conditions. The 
Header Error Control (HEC) corresponds to a standard ATM cell HEC field, 
and the Cell Payload (PDU) (48 octets) corresponds to a normal ATM cell 
PDU. The Forward Error Correction field is 4 octets which contain a 4-byte 
1 0 FEC which covers octets 4 through 59 of the upstream slot. The FEC type is 
RS (54, 58). Finally, the Guard Band is 2 octets. This dead zone is the 
transmitter guard band between cell bursts. 

Figure 16 schematically illustrates an upstream channel 302 that has 
1 5 been organized into slots 1606 which may be assigned for the transmission of 
ATM cells from cable modem A 106 or cable modem B 106. The slots on the 
upstream channel are numbered in ascending order beginning at 0 up to 2044 
(decimal) and then the count is repeated starting at 0. In the currently 
preferred embodiment, the slots are subdivided into mini-slots; four mini- 
20 slots comprise a whole slot which holds an ATM cell. Common techniques 
for ranging the cable modems 106 produce a timing alignment condition such 
that if two modems are both instructed to simultaneously transmit an ATM 
cell in the same slot n, where n is one integer value selected from 0 to 2044, 
the first bit from each cable modem transmission 1603 and 1605 would arrive 
25 at the head end receiver port 306 at the same time, within minimum time jitter 
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1609. Further, the head end controller 103, via the transmitter port card 313 
and downstream channel 301, issues grant messages 1601 to cable modems 
via their receivers 1602 and 1604. The contents of the grant message contain 
individual grants that are directed to specific cable modems. Grant message 
5 1601 contains a special grant "X", called a contention grant, which gives 
permission for any modem to transmit in slot 0, a direct grant for Cable 
Modem B 106 to transmit one ATM cell in slot 12 and a direct grant for Cable 
Modem B 106 to transmit two ATM cells, in slots 16 and 20, and a null grant 
which instructs cable modem A 106 to update its idle timer value. The direct 

1 0 grant messages are received by the Cable Modem B 106 such that its ATM cell 
is appropriately transmitted in upstream slot 12 1607 and received by Cable 
Modem B 106 such that its ATM cells are appropriately transmitted in slots 16 
and 20 1608. It is asserted that the Grant Message 1601 mechanism can be 
extended to an arbitrary number of individually identified Cable Modems 106 

1 5 which receive messages via the same downstream channel 301 such that 

sharing of the slotted upstream channel 302 is accomplished under direction 
of grants being issued from the head end controller 103. 

It is asserted that the specific upstream channel access slot counting 
20 mechanism of counting from 0 to 2044 then repeating to 0 can be generalized 
to any slot counting method employing a repeating integer counting range 
where all cable modems on the same upstream channel share the starting 
integer and notion of the integer value on which to begin repeat count. 
Furthermore, in a slot grant system, the assignment of slots on a fixed 
25 repeating interval or at a fixed distance (e.g., n=n+60), yields a constant bit 
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rate service rate to the cable modem. Further, it is asserted that while 
constant bit rate allocations are being granted, the unused slots on the 
upstream channel can be assigned to any cable modem on a dynamic basis, 
thereby assigning additional variable bandwidth to any cable modem. In one 
5 embodiment, the mixture of constant bit rate and variable bit rate allocations 
are scheduled on the same upstream channel 

Figure 17 is a circuit diagram showing the functions and interactions 
corresponding to a VPI selector and a VC demultiplexer of an STU for 

1 0 handling incoming ATM cells on line 607. This combination of circuits is 
called the Downstream Cell Processor 1708. The ATM cell stream output 
from the cell delineation, HEC verification, and DES decoding blocks is input 
to the Destination Station ID (DSID) Identification circuit 1701. The function 
of the DSID circuit 1701 is to determine which of the ATM cells are to be 

1 5 accepted and which are to be discarded. The STU has been preprogrammed 
to identify certain VPI values. In the preferred embodiment, one of these VPI 
values corresponds to the Station Unique Identifier (SUID). The selection 
process is determined according to the VPIs contained in each individual 
ATM cell as compared against the preprogrammed VPI values. Only those 

20 ATM cells with a VPI value matching the preprogrammed VPI values are 
retained. Other ATM cells are ignored. In this example, only those cells 
having VPIs of 1, 4, and 6 are retained for processing. VPI 1 may correspond 
to a unicast mode, whereby only this particular STU receives ATM cells with 
a VPI 1 value (Le., the SUID value). The VPI 1 value is unique to this 

25 particular STU. A VPI 6 may correspond to a broadcast mode, whereby it is 



CONFIDENTIAL 



70 



intended that all STUs are to receive the ATM cell. One or more VPIs can be 
programmed into the STU so that it accepts multicast ATM cells. For 
example, VPI 4 may correspond to multicast ATM cells, whereby this 
particular STU belongs to a specific group of STUs which have been 
5 programmed to accept ATM cells with a VPI value of 4. In the preferred 
embodiment, the DSID Identification function 1701 selects ATM cells based 
on VPI values. It should be noted that this function can be augmented to 
select ATM cells for further processing based upon any bit pattern contained 
in the downstream MAC messages. That is, combinations of VPI or VCI may 
1 0 be used or combinations of other MAC header information and VPI or VCI 
values may be used. 



If the DSID identification circuit 1701 determines a match between the 
preprogrammed VPI values and the VPI field of the ATM cell, that particular 

1 5 ATM cell is routed for further processing by the VCI Demultiplexer 1702. The 
VCI Demultiplexer 1702 routes the ATM cell to one of several different 
circuits within the STU, depending on its VCI value. One such VCI value 
(e.g., VCI 128) causes the ATM cell to the Grant Filter 1703. Grant Filter 1703 
filters the direct, contention, and null grants sent by the headend controller. 

20 The grants are then sent on for further processing via line 1707. Certain VCI 
values (e.g., VCI 10-14) cause the ATM cell to be sent to one of several 
Ethernet AAL5 reassembly queues 1704 which reassembles Ethernet frames 
which have been null encapsulated in an AAL5 stream into Ethernet packets. 
The reassembled Ethernet packets are sent via lines 1705 to the forwarder 

25 1706. Based on the VPI, VCI values, the Encapsulation and Etype table 1006 
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provides the appropriate encapsulation and etype information to the 
Forwarder 1706. The resulting packets, VCI, encapsulation, and etype 
information is then output on line 1008. Packets which do not get sent to 
either the Grant Filter 1703 or AAL5 Reassembly Queues 1704, are input to 
5 the ATM Service Processor 1026 which determines whether the packet is to be 
discarded or output onto interface line 1027. It should be noted that the VCI 
Demux function 1702 could be a more sophisticated switching function. 

Figure 18 shows a circuit diagram of an upstream cell scheduler 1805 
1 0 corresponding to an STU. There are two inputs associated with enabling the 
STU to perform upstream transmissions. First, special virtual connections on 
line 612 are used specifically for grants (e.g., direct, contention, and null). 
Grant cells designated for this particular STU are identified by their VPIs by 
the DSID identification circuit 1701. The VCI demultiplexer 1702 routes the 
1 5 grant cells to the grant filter 1703 according to the VCI value (e.g., VCI 128) 
and then to the grant queue 1801 via line 1707. The queued grants are 
dispensed to the scheduler 1802 which schedules ATM cells for upstream 
bound transmissions over line 701 according to the slotted transmission 
process of Figure 16. The actual data to be transmitted is input on line 1017 to 
20 the queue multiplexing process 1804. By referencing the VPI, VCI values into 
a queue mapping table 1020, a queue ID is determined. The queue ID allows 
the queue multiplexing process to prioritize ATM cells on an individual basis 
into the various cell queues 1803. Eventually, the ATM cells stored in the cell 
queues 1803 are cleared for transmission by scheduler 1802. Furthermore, the 
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a gg re g ate queue length of the ATM cells awaiting transmission in the data 
queues 1803 are sent to the headend controller via line 702. 

Figure 19 shows a block diagram of an Ethernet and ATM Leaf Cable 
5 Modem 1901. This figure is equivalent to that shown in Figure 10, except that the 
ATM based Ethernet Leaf Processor that had been connected to an ATM switch is 
now adapted to an RF connected cable leaf modem. The RF connected cable leaf 
modem exhibits the same behavioral semantics as described with reference to 
Figure 10. The three new blocks included in Figure 10 that was not shown in 

1 0 Figure 10 include the Downstream Cell Processor 1708, Cable Modem RF to ATM 
Receiver 608, and Diplexor 1903. The downstream cell processor 1708 has been 
described in reference to Figure 17. Its output is the same as that of the ATM 
AAL5 reassembly processor 1004 of Figure 10. They are functional equivalents. 
The Cable Modem RF to ATM Receiver was described in reference to Figure 6. 

1 5 The Diplexor 1903 is a common high pass/low pass type filter coupler that routes 
the downstream RF input to Receiver 613 while routing the RF output from the 
transmitter 717 upstream. 

Figure 20 shows the ATM system of the present invention having multiple 
20 virtual networks supported by multiple RF channels. The Head End 

Communication Controller 103 can have any number of downstream and 
upstream channels for supporting a plurality of virtual private networks. For 
purposes of illustration, three downstream channels and three upstream 
channels are shown for supporting virtual private networks U and V on interface 
25 2005 and virtual private networks W and X on interface 2007. Downstream 
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channels 1 and 2 and upstream channels 1 and 2 function as described above. 
However, downstream channel 3 and upstream channel 3 demonstrate the use of 
a different MAC domain. The virtual private network U 2001 consists of STU 5, 
STU 6, and STU 7. STU 5 services a single Home Equipment (e.g., home 
5 computers) 5, and STU 7 services a single Home Equipment (HE) 7. However, 
STU 6 services both HE 6 and HE 11, thereby showing that a single STU can 
service more than one HE. Furthermore, it can be seen that separate devices on 
different downstream channels can be serviced on the same upstream channel 
(e.g., STUs 5, 6, and 7 are serviced by downstream channels 1, 2, and 2 
1 0 respectively, but are all serviced by a single upstream channel 1). 

Virtual private network V 2002 consists of STU 7, HE 7, STU 8, and HE 8. 
STU 7 is connected to downstream channel 2 and upstream channel 1. In 
contrast, STU 8 is connected to downstream channel 3 and upstream channel 3, 

1 5 which belongs to a different MAC domain. Note also that STU 7 and HE 7 
belongs to both virtual private network U 2001 and virtual private network V 
2002. This illustrates the flexibility of the present invention to accommodate the 
same STU and HE in multiple virtual private networks over the same upstream 
and downstream channels. Virtual private network W 2003 consists of STU1, HE 

20 1, STU 2, HE 2, and HE 10. STU1 and STU 2- have different upstream and 
downstream channels, yet they belong to the same virtual private network. 
Although HE10 participates in virtual private network W, it is serviced by STU 3 
which principally belongs to virtual private network X 2004. Consequently, an 
HE does not have to be in a virtual private network in order to participate in that 

25 particular virtual private network. Conversely, a single STU can service multiple 
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HEs belonging to different virtual private networks. For example, STU 3 services 
HE 10 which belongs to virtual private network W and HE 3 which belongs to 
virtual private network X. Virtual private network X 2004 consists of STU 3, 
STU 4, and STU 9 with respective HE 3, HE 4, and HE 9. STU 3 and STU 4 
5 belong to the same MAC domain but have different downstream and upstream 
channels. STU 9 is in a different MAC domain, but belongs to the same virtual 
private network X as STUs 3 and 4. 

Figure 21 shows a schematic diagram of a Headend Communications 
1 0 Controller supporting two MAC scheduling domains and an integrated services 
interface. The downstream channels 1 and 2 and upstream channels 1 and 2 
correspond to those shown in Figure 20 and comprise MAC scheduling domain 
1, shown as 2106. Likewise, downstream and upstream channels 3 correspond to 
those shown in Figure 20 and comprise a different MAC scheduling domain 2, 
1 5 shown as 2105. The integrated services interface includes Video Controller Port 
Card 2101 and Voice Controller Port Card 2103. 

Figure 22 is a schematic diagram illustrating how a single Ethernet Root 
controller can support multiple virtual private networks over the same transmit 

20 and receive channels. This is feasible because Common ATM Switch Fabric 305 
supports point-to-point connections as well as point-to-multipoint connections . 
Thereby, a unicast transmission can be sent from Ethernet Root Controller 311 
via Common ATM Switch Fabric 305 to either of the two transmit channels 313 
on the downstream. Likewise, unicast information can be received by the 

25 Ethernet Controller 311 on either of the two receiver channels 302. However, 
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group addressed information (e.g., multi-cast and broadcast) is shared by all 
members associated with that group. In the example shown in this figure, 
Ethernet Controller #1 311 can send a first unicast transmission to virtual private 
networks U and V on transmit channel #1 through interface 307. These signals 
5 are depicted as UU1 and VU1. Ethernet Controller #1 can also send a second 
unicast transmission to virtual private networks U and V via a different transmit 
channel #2 through a separate interface 2201. These signals are depicted as UU2 
and VU2. Ethernet Controller #1 can also send a multicast transmission to 
virtual private networks U and V. The multicast transmissions (UM and VM) 

1 0 from the Ethernet Controller #1 are duplicated by Copy Network 2202. One set 
of the UM and VM signals is sent via interface 307 to transmit channel #1 while 
the duplicate set of the UM and VM signals is sent via interface 2201 to the 
transmit channel #2. On the upstream side, Ethernet Controller #1 can receive a 
first transmission (Ul and VI) from the U and V virtual private networks from 

1 5 Receiver Channel Port Card #1. At the same time, Ethernet Controller #1 can 
receive a second transmission (U2 and V2) from the U and V virtual private 
networks on the receiver channel port card #2. 

The traces shown in the ATM Switch 305 correspond to virtual 
20 connections, which may be a virtual path routings or a collection of virtual 

circuits. There exist a variety of different equivalent methods for providing the 
same interconnectivity through an ATM switch. Hence, it is shown that with the 
present invention, one ethernet controller can support multiple of virtual private 
networks up to the capacity of the ATM switch over multiple downstream 
25 transmitter channels and multiple receiver upstream channels. The number of 



CONFIDENTIAL 



76 



transmitter channels can be scaled to any arbitrary number by means of the 
virtual connections and copy networks, and the number of receiver channels can 
be scaled arbitrarily, independent of the number of virtual private networks 
actually deployed over those channels. 

5 

Figure 23 is a schematic diagram illustrating how multiple Ethernet 
controllers can support different virtual private networks. In the example 
shown, Ethernet Controller #2 is assigned to virtual private network W, and 
Ethernet Controller #3 is assigned to virtual private network X. Ethernet 

1 0 Controller #2 can send a unicast signal (WU3) and a multicast signal (WM) to 
the Transmit Channel #3. Likewise, Ethernet Controller #3 can send a unicast 
signal (XU3) and a multicast signal (XM) to the same Transmit Channel #3 
even though it has a different interface than that of Ethernet Controller #2. 
And because the same Transmit channel is being used, there is no need for a 

1 5 copy network. On the upstream side, the Receiver Channel Port Card #3 

receives both unicast signals from the virtual private network W (W3) as well 
as from virtual private network X (X3). The W3 signal is routed through 
virtual circuits of the ATM Switch to Ethernet Controller #2 while the X3 
signal is routed to the Ethernet Controller #3. It should be noted that the 

20 combination of Figures 22 and 23 teach that the present invention allows for 
scalability and a variety of interconnections and configurations. This 
flexibility also allows one Ethernet controller to participate in multiple MAC 
domains and multiple Ethernet Controllers to participate in any combination 
of downstream channels, upstream channels, and MAC domains. 

25 
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Figure 24 shows an implementation of two MAC scheduling domains. 
Each of the Receiver Port Cards 306 contain a Traffic Scheduler which is 
responsible for processing the requests received on that upstream channel in 
issuing grants on the downstream as part of the grant mechanism described 
5 above. A MAC domain is comprised of a set of downstream transmitter 
channels and the set of upstream receiver channels that send their grants 
down that set of transmitter channels. Grants are issued on a broadcast or 
multicast VPI value on a specific VCI (e.g. 128) to groups of STUs which may 
be participating on that particular upstream channel. However, these groups 

1 0 of STUs may be listening on one of a plurality of downstream channels in the 
MAC scheduling domain. Hence, all grant messages are sent down all the 
transmit channels simultaneously. For example, a grant Gl from Receiver 
Channel Port Card #1 and a grant G2 from Receiver Channel Port Card #2 are 
input to Copy Network 2202 which copies and sends duplicate sets of both 

1 5 grants Gl, G2 to Transmit Channel #1 and Transmit Channel #2. Note that in 
the second MAC scheduling domain 2105 where there is only one Receiver 
Channel Port Card #3 and one Transmit Channel #3, there is no need for a 
copy network. The significance of this design is that one can scale the 
number of transmit channels up or down by simply establishing the 

20 appropriate point-to-multipoint connections; The number of receiver 
channels can be similarly scaled because of the traffic scheduling being 
employed. In the preferred embodiment, the traffic scheduler resides in the 
Receiver Channel Port Card; the scheduler receives reports regarding 
upstream traffic and requests and then generates grants which are sent to one 

25 or more Transmitter Port Cards. It should be noted that the traffic scheduler 
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may reside elsewhere in the head-end controller so long as it receives 
upstream traffic reports and requests from each Receiver Port Card and issues 
grants which are sent on one or more downstream channels. In the preferred 
embodiment, all upstream channel reports, station requests, and grants are 
packaged in one or more ATM cells. It should be noted that other packet 
formats may be used to convey this information. 

Figure 25 is a schematic diagram of a Receiver Channel Port Card. As 
described above, the RF input is fed into the Upstream Receiver Processor 501 
on interface 502. ATM cells on line 508 are input to the ATM Network 
interface 509 from the Upstream Receiver Processor 501. The Traffic 
Scheduler 2501 accepts the slot occupancy reports, station requests and 
management reports from the Upstream Receiver Processor 501 for 
scheduling purposes. Specifically, this information is used to issue grants on 
line 2502 to the ATM Network Interface 509. These grants are passed on 
downstream via interface 308 to the STUs giving them permission to use 
upstream resources. The ATM End of PDU reports generated by the ATM 
HEC Processor and ATM Cell Scheduler informs the Traffic Scheduler of 
downstream traffic. More significantly, the Packet Summary Report which 
contains specific packet information (e.g., TCP downstream data) is used as a 
downstream traffic indication by the Traffic Scheduler. 

Figure 26a is a diagram illustrating the protocol flow between a 
Headend Controller (HE) with an STU and associated Home Computing 
Equipment (HCE). The y-axis corresponds to the elapse of time. Starting at 
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the top, the Headend Controller initially sent TCP data downstream to the 
STU. The STU receives the TCP data and forwards it to the HCE. Some time 
later, the HCE sends a TCP acknowledgment signal (ACK) back to the STU. 
The TCP ACK signal acknowledges the receipt of TCP data and is also used 
5 in error recovery mechanism and flow control. When the STU receives a TCP 
ACK from the HCE, it enqueues that packet and issues a request back 
upstream to the Headend Controller. In response, the Headend Controller 
receives the request, performs scheduling, and issues a grant for that STU 
request on the downstream corresponding to the scheduling. A short time 
1 0 later, the grant is received by the STU and an TCP ACK packet is transmitted 
to the Headend Controller. The Headend Controller receives and processes 
the TCP ACK. 



Figure 26b is a diagram illustrating a protocol flow between a Headend 
1 5 Controller with an STU and Associated HCE having improved response 
timing by informing the scheduler of TCP data that was previously sent 
downstream. Initially, TCP data is sent downstream by the Headend 
Controller to the STU. As described above, packet summary and ATM end of 
PDU reports are input to the scheduler pertaining to the TCP data that was 
20 just sent. Thereby, the scheduler knows to expect an acknowledgment back 
corresponding to that packet. At the same time, a notification is sent to the 
receiver card. The TCP data is then received by the STU which forwards it to 
the Home Computing Equipment. In response, the HE sends a TCP ACK 
signal to the STU. The STU enqueues the TCP ACK. However, the Headend 
25 Controller sends a grant to the STU just before a request from that STU is 
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received. The Headend Controller can send the grant based on the 
notification that was received. This grant is sent downstream to the STtL 
Thereupon, a TCP ACK packet is transmitted upstream to the Headend 
Controller for processing. Note that the difference in the time scale of when 
5 the TCP ACK is received between Figures 26a and 26b shows that the TCP 
flow is more efficient when the scheduler is supplied with information to 
sufficiently predict when to send grants, thereby removing the time 
associated with a typical request/grant loop. It should be noted that the 
function of the response time improvements in Figures 26a and Figures 26b 
1 0 have been illustrated using the TCP protocol. This response time 

improvement in general in nature may be achieved for other protocols 
besides CP, where applicable* 

It should be noted that data communication networks with a shared 
1 5 channel to a central bandwidth scheduler, including satellite and wireless 

systems, must utilize either a polling mechanism, where the scheduler asks the 
station if it has any data to send, or a contention mechanism, where the station 
sends data or a request to send data to the scheduler during a suitably 
designated opportunity. In the former case, the time at which the station 
20 responds has been allocated to only to that station and in the latter case, any 

waiting station can respond, thus opening the possibility of collision and loss of 
the sent data. Polling means that a station's requests can always be passed to the 
scheduler at some known, bounded delay, but it also wastes bandwidth on 
stations that have nothing to send. This becomes prohibitive for large numbers 
25 of stations. 
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Contention mechanisms work very well in high-speed, low-delay 
environments like that of an Ethernet network or IEEE 802.3 network. For 
systems like CATV plants, there is a relativity long delay between the time 
5 request can be sent by a station and the scheduler can respond with an allocated 
time ("grant") at which the station can send. In addition, when collisions occur, 
the necessary Contention Resolution Algorithms (CRAs) can cause even longer 
delays before they can be resolved and all of the stations can pass a request to the 
scheduler. When a station has information to send, it takes a minimum of a 
1 0 round trip delay through the system ( including scheduler overhead) when there 
is not collision and the time can grow to many round trip delays when collisions 
occur. The problem then is the need to keep stations out of contention and 
reduce delays without using a polling system. 

1 5 The problem occurs at the medium access (MAC) layer of the data 

network, but this solution uses knowledge about the behavior of the transport 
layer of data networking. All reliable transport protocols send 
acknowledgments (ACKs) to the sender of the data. The number of data 
packets received per acknowledgment sent varies with the particular 

20 transport protocol (e.g., TCP/IP. Appletalk) and its particular 

implementation, but in general, information about a data packet being sent to 
a specific station can be used by the scheduler as a "hint" to give that station a 
grant in which to send acknowledgment. Knowledge about which particular 
protocol is being used and feedback on whether the grants were used to 

25 improve the quality of the "hints" sent to the scheduler. For example, in 
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TCP/IP, an ACK should be sent no less often than one every two received 
packets ( though some implementations violate this). Thus, a good hint to the 
scheduler of when to allocate a grant is send one grant for every two packets 
sent to the station. Additional information, such as whether or not the grants 
5 were used, can be utilized to improve the quality of the hints. The grant can * 
be sent to the station at about the same time as the packet for a time that takes 
into account the station's time to process the data and produce a grant. Now 
the delay for the station to send a response is decreased to a small delay to 
make sure the ACK is ready to send plus the time to send from the station to 

1 0 the headend ( much smaller than the other direction in cable systems). Hints 
can work when the station is sending data and receiving ACKs, too, although 
the hint information requires more processing for most efficient use of the 
communications channel. The benefit of this approach is that it uses 
information about the use of a MAC layer protocol by higher level protocols 

1 5 to improve the efficiency of the MAC layer protocol 

Figure 27 illustrates the mapping of the VCI, VPI space of an ATM cell 
through a common ATM UNI Switch Fabric 305. Port card 2701 supports a 
VC 2121, 129 corresponding to a virtual path identifier of 2121 and a virtual 

20 circuit identifier of 129. In the currently preferred embodiment, the VPI space 
of an ATM cell is used in the downstream to indicate the destination station. 
Thereby, VC 2121, 129 corresponds to a station assigned an identification of 
2121 which is connected via virtual circuit 129. Unfortunately, a Common 
ATM UNI Switch Fabric 305 only supports an 8-bit VPI field of an ATM cell 

25 header. This imposes a limit of 0-255 different station IDs. The present 
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invention overcomes this limitation by swapping or "mapping" 1 the VPI value 
with the VCI value. Since the VCI value has a 16-bit field, identifications can 
now extend from 0-65,535. This mapping is proper so long as the VCI value 
does not exceed 255. 

5 

In the example shown, the virtual connection 2703 on VC 2121, 129 is 
input to mapping block 2702. But before the mapping is performed, block 
2702 determines whether the VCI exceeds a pre-determined threshold (e.g., 
128). The mapping function is performed only if the threshold is exceeded. 

1 0 In this example, the VCI value of 129 exceeds the threshold value of 128, 

thereby mapping block 2702 maps VC 2121, 129 to a new virtual connection at 
2704 on VC 129, 2121. VC 129, 2121 can now be properly carried by the 
Common ATM UNI Switch Fabric 305 to the Transmitter Port Card 2707 on 
interface 2709. Similarly, for remapping to be performed, the VPI is checked 

1 5 to determine whether it exceeds the threshold. After determining that the 
VPI is greater than 128, ReMap block 2708 remaps the VPI and VCI values to 
recover the original VC 2121, 129 for output on line 2710. Consequently, Port 
Card 2701 and Transmitter Port Card 2707 can emulate an NNI transmission 
in VP space while utilizing a UNI Switch Fabric by means of the mapping and 

20 remapping functions of blocks 2702 and 2708. The benefit of this 

implementation is that by mapping all VCs into VPs through the switch 
fabric, the VC values (e.g., station IDs) are allowed to vary accordingly, 
thereby facilitating virtual paths through the switch fabric which minimizes 
the number of virtual connections that need to be supported, thereby 

25 improving the switching performance and reducing switch table memory 
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requirements. Furthermore, these functions are performed transparently to 
the user. 

The return path through Receiver Port Card 2711 receives VC 2121,129 
5 on line 2714. Mapping block 2712 checks that the VCI is greater than 128 
before it maps the new VC 129, 2121 to line 2713. VC 129, 2121 is then routed 
through Common ATM UNI Switch Fabric 305 to Port Card 2701 via line 

2706. Block 2702 then determines whether the VPI exceeds 128 before it 
performs a remapping function to recover VC 2121, 129 on line 2705. Hence, 

10 a bi-directional connection is demonstrated. 

Port Card 2715 shows the mapping function for VC 2121, 130, which 
has a virtual connection value of 130 instead of 129. After the mapping 
function is performed by block 2716, this allows a different VPI to be routed 
1 5 through the Common ATM UNI Switch Fabric 305 to Transmitter Port Card 

2707. The remapping is performed by block 2708 to recover VC 2121, 130 on 
line 2722. Likewise, on the return path, a VC 2121, 130 received on line 2724 
of Receiver Port Card 2711 is mapped by block 2712 to VC 130, 2121 which is 
input on 2723 to the Common ATM UNI Switch Fabric 305. VC 130, 2121 is 

20 routed as an input 2720 the Remap Block 2716 which remaps and recovers VC 
2121, 130 on line 2719. It should be noted in this teaching that Port Card 2701 
and Port Card 2715 are each communicating with the same STU, identified by 
VPI 2121, but each card uses a different VCI. This same mechanism can be 
extended to support many port cards and many STUS. It should be noted 

25 that each port card can maintain many virtual connections to many STUs. 
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Figure 28 shows the VCI, VPI space of an ATM cell through a common 
ATM Switch Fabric 305 with selective mapping. Switch. Fabric 305 may be 
either an NNI or UNI switch. As described above, the mapping and 
5 remapping functions are only applied if a specific threshold is met or 

exceeded. Otherwise, the packet is routed through the switching fabric as is, 
without any mapping or remapping being applied. For example VC 200, 100 
on 2803 of Port Card 2801 has a VCI of 100 which is less than the threshold 
value of 128. Hence, the Mapping Block 2802 simply passes VC 200, 100 on 
1 0 through to 2804 without performing the mapping function. VC 200, 100 can 
be handled by the Common ATM NNI or UNI Switch Fabric 305 which 
routes it to line 2805 of Transmitter Port Card 2707. Since no mapping was 
performed, ReMap Block 2708 is instructed to pass VC 200, 100 through 
without performing its remapping function. 

1 5 

Similarly, on the return path, a VC 200, 100 received on line 2808 of the 
Receiver Port Card 2711 is not mapped by Mapping Block 2712 because the 
VCI value is less than the threshold (e.g., 100<128). Hence, VC 200, 100 is 
routed on line 2807 through the Common ATM NNI or UNI Switch Fabric 
20 305 as an input on line 2809 to Port Card 2801. Again, because mapping was 
not previously performed, block 2802 does not perform its remapping 
function. Instead, VC 200, 100 is passed through on 2810. Note that the 
mapping/remapping of VC 2121, 129 described above can be performed on 
this same scheme. 

25 
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Figure 29 illustrates the collapsing of the VCI, VPI space of an ATM 
cell through a Common ATM NNI or UNI Switch Fabric 305. Rather than 
swapping the VCI with the VCI, certain pre-designated VPI values can be 
collapsed into a VPI value of zero. For example, VC 2121, 100 of Port Card 
5 2801 can be collapsed by Mapping Block 2802 to a VC 0, 100. This VC 0, 100 
can be carried on line 2901 through the Common ATM NNI or UNI Switch 
Fabric as an input 2902 to Transmitter Port Card 2707. ReMap Block 2708 
then contains information which reconverts VC 0, 100 into the original VC 
2121, 100 for output on line 2806. Likewise, on the receive path, a VC 2121, 

10 100 received by Receiver Port Card 2711 on line 2808 is collapsed to VC 0, 100 
based on a table stored in Mapping Block 2712. The table stores information 
pertaining to which VPI values are to be changed into a different VPI value 
that can be routed by the ATM switching fabric. Thereupon, the converted 
VC 0, 100 is routed through the Common ATM NNI or UNI Switch Fabric 305 

1 5 for input 2904 to Port Card 2801. The ReMapping Block 2802 contains a 

similar table as the one found in Mapping Block 2712. By performing a table 
look-up, VC 0, 100 is converted back to its origina] VC 2121, 100 for output on 
line 2810. Note that conventional virtual connections as well as the 
mapping/ remapping scheme can also be employed in conjunction with this 

20 conversion /collapsing scheme. By implementing this direct 

mapping/ collapsing scheme, a UNI switch may be upgraded with an NNI 
switch without having to replace or impacting any of the associated port 
cards (e.g., port cards 2701, 2707, 2711, and 2801). It should be noted that the 
Mapping and Remapping functions presented in Figures 27-29 can be 

25 generalized to operate over specific fields and bit ranges within the ATM cell 
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header, that is a port of the VCI field may be swapped with a portion of the 
VPI field, and vice versa. Additionally, the mapping and remapping 
functions may consist of a table lookup function, which takes a specific fields 
within the ATM header and maps to another ATM header. 

5 

Figure 30 shows a schematic diagram of a Headend Communications 
Controller supporting two MAC scheduling domains, whereby one of the 
MAC domains has a non-ATM based protocol. Due to the emergence and 
evolution of new standards and protocols, a non-ATM Protocol Controller 

1 0 3001 is implemented in order to anticipate and facilitate the compliance with 
any such non-ATM based protocols. Furthermore, non-ATM Protocol 
Controller 3001 can expeditiously be used to interface with older, pre-existing 
parts of the system which might not be ATM based. Non-ATM Protocol 
Controller 3001 includes transmit and receive channels 3002 and 3003 which 

1 5 are coupled to cable modems 3004. With the use of the non-ATM Protocol 
Controller 3001, the same Headend Controller, Common ATM Switch Fabric, 
and virtual circuits can be used to handle ATM cells through interfaces 307 
and 308 as well as non-ATM based protocols through interface 3005. 

20 Figure 31 shows a schematic diagram of two MAC scheduling 

domains, whereby one of the MAC domains has a grant mechanism through 
the switch fabric for supporting ATM cells whereas the other MAC domain 
contains an ATM Conversion circuit for performing segmentation and 
reassembly so that it is self-contained and does not require grants through the 

25 switch fabric. Receiver Channel Port Cards 306, belonging to the same MAC 
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domain, both have a Traffic Scheduler for generating grants (e.g., Gl and G2) 
which are transmitted through the Common ATM Switch Fabric downstream 
via Transmit Channel Port Card 313. However, the Non-ATM Based Protocol 
Controller 3001 is interfaced with the Common ATM Switch Fabric through 
5 interface 3005 by means of an ATM Conversion circuit 3101 which contains 
Segmentation and Reassembly. Now, because Non-ATM Based Protocol 
Controller 3001 is wholly contained, there is no need to form a request and 
grant path through the Common ATM Switch Fabric. Hence, it can exist in its 
own MAC domain. 

10 

Figure 32 is a schematic diagram showing the Non-ATM Based 
Protocol Controller 3001 connected to the ATM Conversion Segmentation and 
Reassembly circuit 3101. The function of the Non-ATM Based Protocol 
Controller 3001 is to exchange Ethernet frames or IP packets through the 

1 5 downstream and upstream RF. A Transmitter Module 3201 handles 

downstream traffic on 3002, and Receiver Module 3202 handles upstream 
traffic received on 3003. The Media Access Controller Module 3203 which 
coordinates the MAC scheduling and flow according to the Management and 
Scheduling block 3204. Protocol Frames/Packets are communicated between 

20 the Media Access Controller Module 3203 and the ATM Conversion 

Segmentation and Reassembly circuit 3101 through interface 3205. The ATM 
Conversion Segmentation and Reassembly circuit 3101 also contains an 
intelligent Bridge. 
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A detailed schematic diagram of the ATM Conversion Segmentation 
and Reassembly circuit is shown in Figure 33. The ATM Conversion 
Segmentation and Reassembly circuit is very similar to the Ethernet ATM 
Leaf Processor shown and described with reference to Figure 10 above. Some 
5 of the differences is the absence of the Ethernet Controller and the frames 
now communicate through interface 3205 directly with port 1 of the 3-Port 
Multiprotocol Learning Bridge and Forwarder 3309 which maps virtual 
connections to and from frame based address information. Basically, similar 
to what was described above, ATM cells received by the ATM Networking 

1 0 Interface 3302 on interface 3005 are transmitted to the ATM Service Processor 
3326 on line 3325. Based on the VPI and VCI, the ATM Service Processor 3326 
decides whether the ATM cells are to be forwarded to an external interface 
through line 3327 or to the ATM AAL5 Reassembly Processor 3304. In the 
ATM A AL5 Reassembly Processor 3304, ATM cells are reconstituted into 

1 5 packets according to the commonly available semantics of AAL5 reassembly 
and the encapsulation information 3307 obtained by a lookup of the virtual 
connection information 3305 in the Encapsulation and ETYPE Table 3306. 
The packet, the virtual connection obtained from the ATM cells which carried 
the data, the encapsulation type, and ETYPE information are transmitted 3308 

20 to the 3-Port Multiprotocol Learning Bridge & Forwarder 3309. 

Upon receiving an Ethernet Frame from Port 3, the Forwarder 1009 
constructs a query 3310 to the Bridge Table Processor 3311 which performs a 
table lookup function based upon the information in the query. The Bridge 
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Table Processor 3311 returns a response 3312 to the Forwarder 3309 with 
instructions on how to proceed with the Ethernet frame. 

Filter And Filter Table 3323 provides a multi-protocol packet 
5 examination function which decides whether a packet is allowed to continue 
upstream or whether it should be discarded. The Filter Table is configure by 
the cable operator to allow only authorized transmissions upstream. Hence, 
if Filter 1023 determines that the packet is valid, the packet is allowed to 
proceed upstream to the ATM AAL5 Segmentation Processor 3314 on line 

1 0 3324. Otherwise, if there is no match, the packet is discarded. Thereby, cable 
operators have the ability to control transmissions from the STUs, and 
unauthorized transmissions can be prevented. The ATM AAL5 Segmentation 
Processor 3314 is responsible for receiving Ethernet frames, virtual 
connection, and encapsulation information 3313 from the Forwarder 3309 and 

1 5 converting the Ethernet data into a stream of ATM cells. The Ethernet data is 
processed according to the encapsulation information. The virtual connection 
information is copied to the VPI and VCI values contained in the ATM cells 
generated by the process. The ATM cells are then transmitted 3317 to the 
ATM Cell Scheduler & Cell Queue Memory Processor 3318. 

20 

In the preferred embodiment, the Queue Controller 3318 performs a 
lookup of the virtual connection information 3319 in the Queue Mapping 
Table 3320 to obtain the queue identifier ("Queue ID") number in which to 
place the ATM cells. The Queue Controller 3318 then enqueues the 
25 appropriate internal cell queue. The Queue Controller 3318 maintains many 



CONFIDENTIAL 



91 



internal queues in priority number and transmits cells 3322 from the highest 
priority queue which has enqueued cells directly to the ATM Network 
Interface 3302 and onto the ATM switch fabric on 3005 without having to wait 
for a grant message due to the lack of a request/grant mechanism. Thereby, 
ATM Conversion Segmentation and Reassembly and Intelligent Bridge 3101 
essentially moves the previously defined Ethernet handling from the STU into 
the Headend and acts as an interface to the entire non-ATM media access. 
Because most of the functions inside the Ethernet Leaf Processor are 
equivalent to the Ethernet processing found in an STU, this non-ATM MAC 
can be fronted into the common ATM switching fabric identical to a cable 
modem. Consequently, the same equivalence with the virtual networks 
described above is achieved. It should be noted that the Queue Controller 
3318 may be implement other scheduling mechanisms other that a priority 
sort of the queues. 



Figure 34 shows a schematic diagram of two MAC scheduling 
domains, whereby one of the MAC domains is ATM only protocol and the 
other MAC domain corresponds to a protocol that is both ATM and frame 
based. Receiver Channel Port Cards 306, belonging to the same MAC 
domain, both have a Traffic Scheduler for generating grants (e.g., Gl and G2) 
which are transmitted through the Common ATM Switch Fabric downstream 
via Transmit Channel Port Card 313. However, the ATM and Frame Based 
Protocol Controller 3401 contains a receiver for receiving ATM cells or frames 
on line 3405 on the upstream and a transmitter for transmitting ATM cells or 
frames on the downstream 3404. The ATM and Frame Based Protocol 
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Controller 3401 is interfaced with the Common ATM Switch Fabric through 
interface 3403 by means of an ATM Conversion circuit 3402 which contains 
Segmentation and Reassembly. Now, because Non-ATM Based Protocol 
Controller 3401 is wholly contained, there is no need to form a request and 
5 grant path through the Common ATM Switch Fabric. Hence, it can exist in its 
own MAC domain. 

Figure 35 is a schematic diagram showing the ATM and Frame Based 
Protocol Controller 3401 connected to the ATM Conversion Segmentation and 

1 0 Reassembly circuit 3101. The function of the Non-ATM Based Protocol 

Controller 3001 is to exchange Protocol frames (packets) or ATM cells through 
the downstream and upstream RF. A Transmitter Module 3501 handles 
downstream traffic on 3404, and Receiver Module 3502 handles upstream 
traffic received on 3405. The Mixed mode Media Access Controller Module 

1 5 3503 coordinates the MAC scheduling and flow according to the Management 
and Scheduling block 3504. Protocol Frames/Packets are communicated 
between the Mixed Mode Media Access Controller Module 3503 and the 
ATM Conversion Segmentation and Reassembly circuit 3101 through 
interface 3205. ATM cells are communicated between the Mixed Mode Media 

20 Access Controller Module 3503 and the ATM Conversion block 3101 on lines 
3327 and 3328. Note that the same ATM Conversion block 3101 can be used 
in ATM only mode, non-ATM mode, and ATM and non-ATM mode. 

Figure 36 is a schematic diagram depicting how cable modems 
25 belonging to a different protocol can cooperate within various virtual private 
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networks. Virtual Private Network X 2004 contains a Cable Modeml 3004 
which services HE9 107; Virtual Private Network V 2002 contains a cable 
modem2 3004 which services HE8. Both cable modems 3004 reside on 
downstream channel 3 and upstream channel 3 which are separate MAC 
5 domains for non-ATM protocols. By virtue of the equivalencies inherent to 
the virtual connections described above (e.g. establishing virtual private 
networks through a common ATM switch to the Ethernet Root Processors 
and establishing the Ethernet Leaf Processor at the Headend to front that 
functionality onto another MAC domain), cable modems 3004 which are 

1 0 restricted to a different protocol can, nevertheless, cooperate within their 
respective virtual private networks. In other words, a virtual private 
networks can consist of cable modems that do not share the same MAC tvoe 
as the STUs. It should be noted that any number of virtual private networks 
may be established over downstream channel 3002 and upstream channel 

1 5 3003, with each virtual private networks consisting of one or more STUs. 

Figure 37 shows a schematic diagram of a Headend Communications 
Controller supporting an STU which has the ability to selectively be coupled 
to one of a number of different downstream channels for its reception of 

20 desired data. This selectivity feature is significant because the Headend 

Controller 103 is capable of handling a variety of different types of data, such 
as audio, graphics, video, text, etc. This data is sent downstream 301 on 
channels 1-4 to STUs. During transmission, attenuation and a number of 
error sources, such as noise, interference, crosstalk, etc. may result in the data 

25 becoming corrupted. In an effort to correct these errors, a forward error 
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correction scheme is implemented on a per channel basis. The degree to 
which errors may be corrected depends on the interleave depth of the 
forward error correction. Increasing the interleave depth results in less errors. 
However, increasing the interleave depth directly increases the time that is 
5 required to perform the forward error correction, which detrimentally 
influences the round-trip latency through the network. For high quality 
video transmissions, it is desirable to increase the interleave depth because 
the corresponding increase in latency has rrtinimal impact on the viewer while 
the viewer enjoys better picture quality. In contrast, for high-speed Internet 
1 0 data transmissions or interactive gaming applications occurring in real-time,, 
an increase in the network latency severely degrades performance, as 
perceived by the user. 



Tn one embodiment of the present invention, this high quality versus 
1 5 high latency dilemma is resolved by assigning interleave depths on a 

downstream channel basis. For instance, downstream channel 1 might be 
designated with a relatively high interleave depth, whereas downstream 
channel 2 might be designated with a lower interleave depth. Consequentlv, 
data transmissions on downstream channel 1 have less errors but have 
20 greater latencies as compared against data transmissions on downstream 
channel 2. The user is given control over which channel he or she wishes to 
dial into for receiving the desired service. For example, the user on STU 103 
may be watching television in which picture quality is of more importance 
than latency. Hence, a path 3701 is established to downstream channel 1 over 
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VPI 103 as shown in Figure 27. Path 3702 is established to upstream channel 2 
for sending non time-critical data (e.g., email). 

Suppose that the user next wishes to perform web browsing and 
5 desires to minimize any delays. The user's home equipment would then 
transmit a request to switch from downstream channel 1 (high latency) to 
downstream channel 2 (lower latency) as shown in Figure 38. The protocol 
for handling such requests can be implemented in many different ways. For 
example, it may be implemented as a service location protocol, a proprietary 

1 0 application interchange that overlays the TCP/IP provided by the cable 

operator, or as a web browser applet that allows the user to select the desired 
quality of service. The selected quality of service request is transmitted 
upstream to the Headend Controller 103 which sets up a different virtual 
circuit, thereby reconfiguring .the user's STU to the downstream channel 

1 5 appropriate for that selection. Note that there is no difference in the services 
received by the STU. Changing the downstream channel only changes the 
degree of error correction and latency. The cable operator may charge 
according to the quality of sendee selected by the users. With the present 
invention, the user can be selected whether response time or error rate is 

20 important to their perceived service, to communicate such preferences to the 
head-end controller, and thereby affect changes such that the STU is channel 
hopped to the appropriate downstream channels which suits the subscribers 
needs. 



CONFIDENTIAL 



96 



Some applications, such as broadcast digital video require as error free 
a downstream channel as possible. For these applications, a large amount of 
burst protection is required, so that the user does not perceive appearance 
problems due to noise. Since broadcast video is not interactive, user response 
5 time perception is not an issue. For interactive digital Internet services 

however, response time is an issue, so lower latency is preferred by users. As 
Internet service in general solve error loss problems with a reliable transport 
protocol, the amount of burst protection required in the downstream channel 
is minimal, thereby providing little latency contribution. Internet protocols 

1 0 can function in high latency situations however, users perceive a longer 
response time and they'll likely desire a lower latency, or a QoS suited for 
Internet application they are using. If a user is both receiving a digital 
broadcast video service and accessing an Internet service via the same 
Subscriber Terminal Unit and the same downstream channel, the user may 

1 5 select a downstream channel QoS suited for better video reception and then 
tolerate the longer response time of the Internet service. If the user requires a 
better response time for their Internet service (e.g. web browsing, game 
playing, or IP telephony) then they may elect to select a downstream channel 
QoS suitable for the Internet service, and then tolerate the "snow" or the error 

20 artifacts perceived on their TV screen. This selection is in effect a QoS Knob 
for the user, with one end of the adjustment selecting very small burst 
protection and lowest latency and the other end of the scale support best 
burst protection and much higher latency. A QoS Knob can be available 
separately the downstream channel and the upstream channel, or may be 

25 combined. Also, cable operators can differentially charge based on the QoS 
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requested by the user. It is expected that the lowest latency channels will be 
in demand for Internet services due to the better response time. If the 
availability of these channels is few, then the cable operator can differentially 
charge for providing lowest latency service. It is expected that the lowest 
5 error rate channels will be in demand for digital broadcast video services, and 
consequently be in demand for video on demand services. Average delay 
and error rate .channels will be plentiful for most services, providing the cable 
operator a means to justify a basic QoS price point for average service. 
Moving to either QoS side of average error rate and average latency can 
1 0 justify a higher billing rate. 

The implementation of the QoS Knob can be provided to users using 
several different mechanisms, using both direct and indirect techniques. For 
direct techniques, the user may request a QoS channel for the Subscriber 

1 5 Terminal Unit via a UNI signaling exchange between the consumers Home 
Equipment and the head-end controller. The head-end controller then 
processes the request and affects a change suitable to support the users 
requests. Such changes may include moving the virtual connections between 
the head-end controller and the Subscriber Terminal Unit from one 

20 downstream channel to another; another change may be changing the 

scheduling parameters for the downstream traffic to the STU or the upstream 
traffic from the STU to affect a change. If the new QoS resources (channels 
and bandwidth) are available, the subscribers request can be processed, and 
the cable operator has the option to change their billing rate accordingly. If 

25 the resources are not available, the user should be given feedback, via the 
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direct signaling response, and their billing should not be changed. Another 
example of direct QoS Knob implementation would be for a web browser 
server to be running on the Head-End Controller Port Card and the user 
access their QoS selection via a web browser running in their Home 
5 Computing Equipment (e.g. a world wide web browser running on a PC). 
Changes made via the web interface would be the same as via the direct UNI 
signaling. It should be noted that other direct signaling techniques, such as IP 
RSVP and IEEE 802.1P and IEEE802.1Q priorities can be used as a basis for 
establishing a direct signaling channel. It should be noted that future digital 
1 0 television sets and digital set-top boxes will be interactive allowing signaling 
to be accomplished from the user via screen messages and wireless remote 
controls* 

It should be noted that indirect techniques include the observance in a 
1 5 change in packet protocols and application protocol messages that flow 

through the head-end controller. The subscriber may have arranged with the 
cable operator for differential QoS to be automatically enabled when certain 
applications are running. For example, the packet filter 922 can be 
augmented to observe the start or stop of an IP based telephony application 
20 for a particular STU. Such observances, can be communicated to the 

Headend Controller Port Card via a management message which can then 
affect a change in the QoS delivered to and from the STU. 

Additional details are presented in "The UPSTREAMS Protocol for HFC 
25 Networks" proposal which was submitted to an IEEE committee as IEEE 
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P802. 14-95/152 and which is referenced herein. The foregoing descriptions of 
specific embodiments of the present invention have been presented for purposes 
of illustration and description. They are not intended to be exhaustive or to limit 
the invention to the precise forms disclosed, and obviously many modifications 
5 and variations are possible in light of the above teaching. The embodiments 

were chosen and described in order to best explain the principles of the invention 
and its practical application, to thereby enable others skilled in the art to best 
utilize the invention and various embodiments with various modifications as are 
suited to the particular use contemplated. It is intended that the scope of the 
1 0 invention be defined by the Claims appended hereto and their equivalents. 
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CLAIMS 

What is claimed is: 

1. A cable based communications network, including a headend 
controller and a plurality of subscriber terminal units coupled to the headend 
controller, the system comprised of: 

a first virtual private network comprising one or more of the 
subscriber terminal units; 

a second virtual private network comprising one or more of the 
subscriber terminal units; 

a headend controller which communicates with each subscriber 
terminal unit from the first virtual private network using or more channels 
from a first downstream channel group and using one or more channels from 
a first upstream channel group and a same headend controller which 
communicates with each subscriber terminal unit from the second virtual 
private network using one or more channels from a second downstream, 
channel group and using one or more channels from a second upstream 
channel group. 

2. The system of Claim 1, further comprised of: 

a subscriber terminal unit which is both a member of the first virtual 
private network and a member of the second virtual private network; 
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a first home equipment which communicates with said subscriber 
terminal unit, wherein the home equipment is a both member of the first 
virtual private network and a member of the second virtual private network. 

3. The system of Claim 1, further comprised of: 

a subscriber terminal unit which is both a member of the first virtual 
private network and a member of the second virtual private network; 

a first home equipment which communicates with said subscriber 
terminal unit wherein the first home equipment is a member of the first 
virtual private network. 

a second home equipment which communicates with said subscriber 
terminal unit where the second home equipment is a member of the second 
virtual private network. 

4. The system of Claim 1, wherein: 

the first downstream channel group and the first upstream channel 
group are associated with a first media access control domain; 

the second downstream channel group and the second upstream 
channel group are associated with a second media access control domain. 

5. The system of Claim 4, wherein: 

the first media access control domain wherein the MAC packet formats 
are comprised of ATM cells only; 

the second media access control domain wherein the MAC packet 
formats are comprised of ATM cells only. 
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6. The system of Claim 4, wherein: 

the first media access control domain wherein the MAC packet formats 
are comprised of ATM cells only; 

the second media access control domain wherein the MAC packet 
formats are comprised of combinations of ATM cells and variable length 
packets. 

7. The system of Claim 4, wherein: 

the first media access control domain wherein the MAX! packet formats 
are comprised of ATM cells only; 

the second media access control domain wherein the MAC packet 
formats are comprised of and variable length packets only. 

8. The system of Claim 4, wherein: 

the first media access control domain wherein the MAC packet formats 
are comprised of combinations of ATM cells and variable length packets; 

the second media access control domain wherein the MAC packet 
formats are comprised of combinations of ATM cells and variable length 
packets. 

9. The system of Claim 4, wherein: 

the first media access control domain wherein the MAC packet formats 
are comprised of combinations of ATM cells and variable length packets; 
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the second media access control domain wherein the MAC packet 
formats are comprised of variable length packets only. 

10. The system of Claim 4, wherein: 

the first media access control domain wherein the MAC packet formats 
are comprised of variable length packets only; 

the second media access control domain wherein the MAC packet 
formats are comprised of variable length packets only. 

11. A cable based communications network, including a headend 
controller, a plurality of subscriber terminal units coupled to the headend 
controller, the system comprised of: 

a first virtual private network comprising of one or more subscriber 
terminal units; 

a second virtual private network comprising of one or mere subscriber 
terminal units; 

a headend controller which communicates with each subscriber 
terminal unit from the first virtual private network using or more channels 
from a first downstream channel group and using one or more channels from 
a first upstream channel group and the same headend controller which 
communicates with each subscriber terminal unit from the second virtual 
private network using one or more channels from the first downstream 
channel group and using one or more channels from the first upstream 
channel group. 
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12. The system of Claim 11, further comprised of: 

a subscriber terminal unit which is both a member of the first virtual 
private network and a member of the second virtual private network; 

a first home equipment which communicates with said subscriber 
terminal unit where the home equipment is a both a member of the first 
virtual private network and a member of the second virtual private network* 

13. The system of Claim 11, further comprising: 

a subscriber terminal unit which is both a member of the first virtual 
private network and a member of the second virtual private network; 

a first home equipment which communicates with said subscriber 
terminal unit where the first home equipment is a member of the first virtual 
private network; and 

a second home equipment which communicates with said subscriber 
terminal unit where the second home equipment is a member of the second 
virtual private network. 

14. A subscriber terminal unit coupled to a cable based 
communications network, wherein the subscriber terminal unit 
communicates with one or more home equipment that are members of one or 
more virtual private networks, comprising: 

a subscriber terminal unit which communicates with a headend 
controller using one or more downstream channels and one or more 
upstream channels and which is a member of a first virtual private network 
and a second virtual private network; 
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a first home equipment which communicates with said subscriber 
terminal unit and is a member of a first virtual private network* 

a second home equipment which communicates with said subscriber 
terminal unit and is a member of a second virtual private network. 

15. A subscriber terminal unit coupled to a cable based 
communications network, wherein the subscriber terminal unit 
communicates with one or more home equipment that are members of one or 
more virtual private networks, comprising: 

a subscriber terminal unit which communicates with a headend 
controller using one or more downstream channels and one or more 
upstream channels and which is a member of a first virtual private network 
and a second private network; 

a home equipment which communicates with said subscriber terminal 
unit and is both a member of a first virtual private network and a member of 
a second virtual private network. 

16. A cable based communications network, including a headend 
controller and a plurality of subscriber terminal units coupled to the headend 
controller, the system comprised of: 

a first virtual private network consisting of one or more subscriber 
terminal units; 

a first set of subscriber terminal units which are members of the first 
virtual private network which communicate with the headend controller 
using one or more channels from a first downstream channel group and using 
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one or more channels from a first upstream channel group, wherein the first 
downstream channel group and the first upstream channel group are 
associated with a first MAC domain; 

a second set of subscriber terminal units which are members of the first 
virtual private network which communicate with the headend controller 
using one or more channels from a second downstream channel group and 
using one or more channels from a second upstream channel group, wherein 
the second downstream channel group and the second upstream channel 
group are associated with a second MAC domain* 

17. The system of Claim 16, further comprised of: 
a second virtual private network consisting of one or more subscriber 
terminal units; 

a third set of subscriber terminal units which are members of the 
second virtual private network which communicate with the headend 
controller using one or more channels from said first downstream channel 
group and using one or more channels from said a first upstream channel 
group, wherein said first downstream channel group and said first upstream 
channel group are associated with said first MAC domains; 

a fourth set of subscriber terminal units which are members of said 
second virtual private network which communicate with the headend 
controller using one or more channels from said second downstream channel 
group and using one or more channels from said second upstream channel 
group, wherein said second downstream channel group and said second 
upstream channel group are associated with said second MAC domain. 
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18. The system of Claim 17, further comprised of: 

a subscriber terminal unit which is both a member of the first virtual 
private network and a member of the second virtual private network; 

a first home equipment which communicates with said subscriber 
terminal unit where the home equipment is a both member of the first virtual 
private network and a member of the second virtual private network. 

19. The system of Claim 17, further comprised of: 

a subscriber terminal unit which is both a member of the first virtual 
private network and a member of the second virtual private network; 

a first home equipment which communicates with said subscriber 
terminal unit where the first home equipment is a member of the first virtual 
private network; 

a second home equipment which communicates with said subscriber 
terminal unit where the second home equipment is a member of the second 
virtual private network. 

20. In a cable based communication network including a headend 
controller and a plurality of subscriber terminal units coupled to the headend 
controller, a method of configuring one or more virtual networks between 
subscriber terminal units, the method comprising the steps of: 

grouping one or more of the subscriber terminal units in a first virtual 
private network; 
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grouping one or more of the subscriber terminal units in a second 
virtual private network; 

assigning by the headend controller each subscriber terminal unit from 
the first virtual private network to one or more channels from a first 
downstream channel group and from one or more channels from a first 
upstream channel group; and 

assigning by the headend controller each subscriber terminal unit from 
the second virtual private network to one or more channels from a second 
downstream channel group and from one or more channels from a second 
upstream channel group. 

21. The method of Claim 20, further comprised of the steps: 
grouping a subscriber terminal unit in both the first virtual private 

network and the second virtual private network; 

grouping a home equipment which communicates with said subscriber 
terminal unit in the first virtual private network; 

grouping said home equipment which communicates with said 
subscriber terminal unit in the second virtual private network. 

22. The method of claim 20, further comprised of the steps: 
grouping a subscriber terminal unit in both the first virtual private 

network and the second virtual private network; 

grouping a first home equipment which communicates with a 
subscriber terminal unit where the first home equipment is grouped in the 
first virtual private network; and 
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grouping a second home equipment which communicates with said 
subscriber terminal unit where the second home equipment is grouped in the 
second virtual private network. 

23. A method of coupling a subscriber terminal unit coupled to a cable 
communications network to receive multiple virtual private network 
communications, comprising the steps of: 

attaching a subscriber terminal unit to a cable communications 
network; 

receiving downstream communications on one or more downstream 
channels; 

transmitting communications on one or more upstream channels; 

participating in group communications between said subscriber 
terminal unit and a headend controller for a first virtual private network; 

participating in group communications between said subscriber 
terminal unit and a headend controller for a second virtual private network; 

24. The method of Claim 23 further comprised of the steps of: 
attaching a home equipment to said subscriber terminal unit; 
participating in group communications between said home equipment 

and said subscriber terminal unit for said first virtual private network; 

participating in group communications between said home equipment 
and said subscriber terminal unit for said second virtual private network. 

25. The method of claim 24 further comprised of the steps of: 
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attaching a first home equipment to said subscriber terminal unit; 
attaching a second home equipment to said subscriber terminal unit- 
participating in group communications between said first home 

equipment and said subscriber terminal unit for said first virtual private 

network; 

participating in group communications between said second home 
equipment and said subscriber terminal unit for said second virtual private 
network. 

25. The method of Claim 20, further comprising the steps of: 
grouping a subscriber terminal unit in both the first virtual private 

network and the second virtual private network; and 

grouping a second home equipment which communicates with said 
subscriber terminal unit where the second home equipment is grouped in the 
second virtual private network. 

26. A method of coupling a subscriber terminal unit coupled to a cable 
communications network communications, comprising the steps of: 

attaching a subscriber terminal unit to a cable communications 
network; 

receiving communications from the headend controller on one or more 
downstream channels; 

transmitting communications to the headend controller on one or more 
upstream channels; 
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participating in group communications between said subscriber 
terminal unit and a headend controller for a first virtual private network; 

participating in group communications between said subscriber 
terminal unit and a headend controller for a second virtual private network; 

27. The method of Claim 25 further comprising the steps of: 
attaching a home equipment to said subscriber terminal unit; 
participating in group communications between said home equipment 

and said subscriber terminal unit for said first virtual private network; 

participating in group communications between said home equipment 
and said subscriber terminal unit for said second virtual private network; 

28. The method of Claim 25 further comprising the steps of: 
attaching a first home equipment to said subscriber terminal unit; 
attaching a second home equipment to said subscriber terminal unit; 
participating in group communications between said first home 

equipment and said subscriber terminal unit for said first virtual private 
network; 

participating in group communications between said second home 
equipment and said subscriber terminal unit for said second virtual private 
network. 

29. A communication system comprising: 
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a cable network having one or more downstream channels and one or 
more upstream channels; 

a plurality of subscriber terminal units coupled to the cable network; 

a head end controller coupled to the cable network for controlling 
upstream and downstream communications, wherein the head end controller 
includes: 

a packet interface for receiving packets from subscriber terminal 
units on a first upstream path; 

a packet forwarder coupled to the packet interface for selectively - 
forwarding packets from the packet interface on a first downstream path 
for transmission over one or more downstream channels to designated 
subscriber terminal units. 

30. The communication system of Claim 29, wherein the head end 
controller further comprises: 

a memory for storing a plurality of valid IP addresses; 

a filter coupled to the memory for comparing IP addresses corresponding 
to an address resolution protocol packet with the valid IP addresses stored in 
memory, wherein only valid packets are processed and invalid packets are 
discarded* 

31. The communication system of Claim 29, wherein one of the subscriber 
terminal units comprises: 
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a memory for storing a plurality of valid IP addresses; 

a filter coupled to the memory for comparing BP addresses corresponding 
to an address resolution protocol packet with the valid IP addresses stored in 
memory, wherein only valid packets are allowed to proceed upstream and 
invalid packets are discarded. 

32. The communication system of Claim 29, wherein one of the subscriber 
terminal units is comprised of: 

a memory for storing information pertaining to which packets are to be - 
received by the subscriber terminal unit; 

a filter coupled to memory for selectively processing only downstream 
multicast packets according to the information stored in the memory. 

33. A subscriber terminal unit, comprising: 

an interface for receiving data on one or more downstream channels and 
for transmitting data on one or more upstream channels; 

a first memory coupled to the interface for storing information pertaining 
to which packets are to be received by the subscriber terminal unit; 

a filter coupled to the first memory for selectively processing only 
downstream multicast packets according to the information stored in the 
memory; 

a second memory for storing a plurality of valid IP addresses; 
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a filter coupled to the second memory for comparing IP addresses 
corresponding to an address resolution protocol packet with the valid IP 
addresses stored in memory, wherein only valid packets are allowed to proceed 
upstream and invalid packets are discarded. 

34. A head end controller, comprising: 

a packet interface coupled to an upstream path for receiving upstream 
packets transmitted from a first subscriber terminal unit on one or more 
upstream channels; 

a packet forwarder coupled to the packet interface for selectively 
forwarding packets from the packet interface on a downstream path for 
transmission over one or more downstream channels to a second subscriber 
terminal unit. 

35. The head end controller of Claim 34 further comprising: 

a memory for storing a plurality of valid IP addresses; 

a filter coupled to the memory for comparing IP addresses corresponding 
to an address resolution protocol packet with the valid IP addresses stored in 
memory, wherein only valid packets are processed and invalid packets are 
discarded. 

36. In a communication system, a method for controlling receipt of 
upstream data and transmission of downstream data, comprising the steps of: 
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receiving packets transmitted by a subscriber terminals on one or more 
upstream channels, wherein the packets are received by a packet interface on a 
first upstream path; 

examining the packets to determine destination addresses; 

selectively forwarding the packets from the packet interface on a first 
downstream path for transmission over one or more downstream channels to 
designated subscriber terminal units according to the destination addresses. 

37. The method of Claim 36, wherein the head end controller further 
comprises the steps of: 

storing a plurality of valid IP addresses in a memory; 

comparing IP addresses corresponding to an address resolution protocol 
packet with the valid IP addresses stored in memory to determine whether 
packets are valid or invalid; 

processing valid packets; 

discarding invalid packets. 

38. The method of Claim 37, further comprising the steps of: 

storing information pertaining to which packets are intended to be 
received by a particular subscriber terminal unit in a memory; 

examining each packet received by the particular subscriber terminal unit 
to determine whether the packet was intended to be received by that particular 
subscriber terminal unit; 
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processing only downstream multicast packets that were intended to be 
received by that particular subscriber terminal unit; 

discarding downstream multicast packets that were not intended to be 
received by that particular subscriber terminal unit 

39. A head end controller for controlling upstream and downstream 
communications with a plurality of subscriber terminal units, comprising: 

an ATM switch for routing ATM packets to the subscriber terminal units 
according to a virtual connection comprised of a virtual path identifier and a 
virtual circuit identifier; 

a first port card coupled to the ATM switch having a mapping function, 
wherein a virtual path identifier corresponding to an ATM packet received by 
the first port card is exchanged with a virtual circuit identifier corresponding to 
the ATM packet before being input to the ATM switch; 

a second port card coupled to the ATM switch having a remapping 
function, wherein the virtual path identifier corresponding to the ATM packet 
received by the second port card is exchanged with the virtual circuit identifier. 

40. The head end controller of Claim 39, wherein the mapping function 
exchanges the virtual path identifier with the virtual circuit identifier only when 
the virtual circuit identifier exceeds a pre-determined threshold. 
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41. A head end controller for controlling upstream and downstream 
communications with a plurality of subscriber terminal units, comprising: 

an ATM switch for routing ATM packets to the subscriber terminal units 
according to a virtual connection comprised of a virtual path identifier and a 
virtual circuit identifier; 

a first port card coupled to the ATM switch having a mapping function, 
wherein a mapping function of a first port card replaces an original value 
corresponding to the virtual path identifier with a pre-determined value which is 
routed through the ATM switch and a remapping function of a second port card _ 
replaces the pre-determined value of the virtual path identifier with the original 
value of the virtual path identifier. 

42. In a head end controller for controlling upstream and downstream 
communications with a plurality of subscriber terminal units, a method for 
routing an ATM packet according to a virtual connection having a virtual path 
identifier and a virtual circuit identifier, comprising the steps of: 

exchanging the virtual path identifier with the virtual circuit identifier of 
the packet before the packet is input to an ATM switch; 

inputting the packet to the ATM switch; 

exchanging the virtual path identifier with the virtual circuit identifier 
after the packet has been routed through the ATM switch. 
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43* The method of Claim 42 further comprising the step of comparing the 
virtual circuit identifier with a pre-determined threshold, wherein the virtual 
path identifier is exchanged with the virtual circuit identifier if the virtual circuit 
identifier exceeds a pre-determined threshold. 

44. In a head end controller for controlling upstream and downstream 
communications with a plurality of subscriber terminal units, a method for 
routing an ATM packet according to a virtual connection having a virtual path 
identifier and a virtual circuit identifier, comprising the steps of: 

substituting a pre-determined virtual path identifier in place of an original 
virtual path identifier prior to inputting the packet to an ATM switch 

inputting the packet with the substitute virtual path identifier to the ATM 
switch; 

replacing the original virtual path identifier value in place of the substitute 
virtual path identifier after the packet has been routed through the ATM switch. 

45. A communications network, comprising: 

a medium comprised of a plurality of downstream channels and one or 
more upstream channels; 

a user interface which accepts a command from a user indicating the 
user's preferred latency; 

a transmitter coupled to the user interface, wherein data indicating the 
user's preferred latency is transmitted over one of the upstream channels; 
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a manager which transmits a first service over one of the downstream 
channels responsive to the data indicating the user's preferred latency that was 
received over one of the upstream channels. 

46. The communications network of Claim 45, wherein the manager 
transmits a second service over the downstream channel, wherein the first 
service and the second service are comprised of either video, game playing, 
graphics, text, or audio data. 

47. The communications network of Claim 45, wherein the manager 
switches from a first downstream channel for transmission of the first service to a 
second downstream channel for transmission of the first service in response to 
receiving data indicating that the user's preferred latency has been changed, the 
second downstream channel having a different latency than the first downstream 
channel. 

48. In a communications network, a method for transmitting data through 
a medium having more than one downstream channels and one or more 
upstream channels, comprising the steps of: 

accepting a command from a user indicating the user's preferred latency; 

transmitting data indicating the user's preferred latency over one of the 
upstream channels; 
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transmitting a first service on one of the downstream channels responsive 
to the data indicating the user's preferred latency that was received over one of 
the upstream channels. 

49. The method of Claim 48 further comprising the step of transmitting a 
second service over the downstream channel, wherein the first service and the 
second service are comprised of either video, game playing, graphics, text, or 
audio data. 

50. The method of Claim 49 further comprising the step of switching from 
a first downstream channel for transmission of the first service to a second 
downstream channel for transmission of the first service in response to receiving 
data indicating that the user's preferred latency has been changed, wherein the 
second downstream channel has a different latency than the first downstream 
channel. 

51. In a communications network, an apparatus for performing predictive 
scheduling, comprising: 

a transmitter for transmitting a packet to a destination; 

a memory coupled to the transmitter for storing a set of criteria; 

a processor coupled to the transmitter for examining the packet to 
determine whether the packet meets any of the criteria stored in the memory, 
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wherein if the packet meets any of the criteria, a predictive notification is 
generated; 

a scheduler coupled to the processor for scheduling transmissions, 
wherein when the scheduler receives the predictive notification from the 
processor, the scheduler generates a grant which the transmitter sends to the 
source. 

52. The apparatus of Claim 51, wherein the transmitter sends the grant 
before the subscriber terminal unit sends a request corresponding to the received- 
packet 

53. In a communications network, a method for scheduling data 
transmissions between a subscriber terminal unit and a head end controller, 
comprising the steps of: 

sending a packet from the head end controller to the subscriber terminal 

unit; 

examining the packet to determine whether the first packet meets a 
specific criteria, wherein if the packet meets the criteria: 

generating a predictive notification to a scheduling process to 
inform the scheduling process that the packet meeting the criteria has 
been sent; 

generating a grant when the scheduling process receives the 
predictive notification; 
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sending the grant to the subscriber terminal unit. 

54. The communications network of Claim 53, wherein the grant is sent 
before the subscriber terminal unit sends a request corresponding to the received 
packet. 

55. A communications network, comprising: 

a medium having one or more downstream channels and a plurality of 
upstream channels; 

a plurality of subscriber terminal units coupled to the medium; 

a head end controller coupled to the medium having a transmitter for 
transmitting packets downstream to the subscriber terminal units and a plurality 
of receivers for receiving upstream packets; 

a clock generator for generating a timing signal from the transmitter 
having a variable delay corresponding to a sum of the latencies corresponding to 
the downstream and upstream channels, wherein the timing signal is input to the 
receivers for use in performing a ranging function. 

56. A communication system comprising: 

a cable network having one or more downstream channels and one or 
more upstream channels; 

a plurality of subscriber terminal units coupled to the cable network; 
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a head end controller coupled to the cable network for controlling 
upstream and downstream communications, wherein the head end controller 
includes: 

a first receiver for receiving packets from one of the subscriber 
terminal units on a first upstream path, wherein the first receiver has a 
corresponding first scheduler which schedules the subscriber terminal 
units by generating grants based on requests received from the subscriber 
terminal units; 

a transmitter for transmitting a grant generated by the scheduler to. 
a first downstream path; 

a packet network coupling the receiver to the transmitter, wherein 
the packet network carries the grant from the scheduler to the 
transmitter, 

57. The system of Claim 56 further comprising a second receiver 
coupled to the packet network, wherein the second receiver has a corresponding 
second scheduler for receiving requests on a second upstream path and 
generating grants which are transmitted by the first transmitter on the first 
downstream path. 

58. The system of Claim 56 further comprising a second transmitter 
coupled to the packet network, wherein the grant generated by the first 
scheduler is transmitted by the first transmitter to the first downstream path and 
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the grant is also transmitted by the second transmitter to a second downstream 
path. 

59. The system of Claim 56 further comprising: 

a second receiver coupled to the packet network, wherein the second 
receiver has a corresponding second scheduler for receiving requests on a second 
upstream path and generating grants in response to the received requests; 

a second transmitter coupled to the packet network, wherein grants 
generated by either of the first receiver or second receiver are transmitted by 
either the first transmitter on the first downstream path or by the second 
transmitter to a second downstream path. 

60. The system of Claim 56, wherein the packet network is comprised 
of an ATM network. 

61. The system of Claim 60, wherein a plurality of grants are included 
in a single ATM cell. 

62. In a communication system having one or more downstream channels 
and one or more upstream channels coupling a plurality of subsriber terminal 
units to a headend controller, a method for scheduling the subscriber terminal 
units, comprising the steps of: 

generating a request from one of the subscriber terminal units; 
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transmitting the request upstream to a first receiver; 

generating a grant in response to the request by a first scheduler corresponding 
to the first receiver; 

conveying the request through a packet network to a first transmitter; 

transmitting the grant on a first downstream channel to the subscriber 
terminal unit. 

63. The method of Claim 62 further comprising the steps of receiving 
requests on a second upstream path by a second receiver coupled to the packet 
network having a second scheduler for generating grants which are transmitted 
by the first transmitter on the first downstream path. 

64. The method of Claim 62 further comprising the step of transmitting 
the grant by a second transmitter coupled to the packet network. 

65. The method of Claim 62 further comprising the steps of: 

receiving requests on a second upstream path by a second receiver 
coupled to the packet network, wherein the second receiver has a corresponding 
second scheduler; 

generating grants by the first scheduler in response to requests received 
by the first receiver; 

generating grants by the second scheduler in response to requests received 
by the second receiver; 
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transmitting the grants by the first transmitter or a second transmitter or 
coupled to the packet network. 

66. The method of Claim 62, wherein the packet network is comprised 
of an ATM network. 

67. The method of Claim 62 further comprising the step of including a 
plurality of grants in a single ATM cell 
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ABSTRACT OF THE DISCLOSURE 

A two-way cable network offering high-speed broadband 
communications delivered via virtual private networks over a multi-channel 

5 shared media system. Bi-directional transmission of packet to ATM cell based 
communications is established between a head end communication controller 
and a number of subscriber terminal units, whereby individual cells are 
prioritized and routed according to a virtual connection. Virtual connections are 
organized to support multiple virtual private networks in a shared media CATV 

1 0 system. The virtual private network to which a particular STU belongs is user 
selectable and has the flexibility of handling multi up/downstream channels 
with different MAC domains. The present invention can also handle non-ATM 
MAC domains via the same common ATM switch. To overcome the limited 
number of addresses inherent to common ATM switches, a mapping/ remapping 

1 5 function is implemented in the port cards. Furthermore, downstream as well as 
upstream traffic are filtered at each STU. In one embodiment, information 
pertaining to downstream traffic is used to implement predictive scheduling in 
order to improve the timing associated with the request/grant cycle. In another 
embodiment, a user has the ability to select a quality of service that best suits the 

20 needs of the current application. In a further embodiment, the scheduling 
function is associated with each of the receivers in order to provide improved 
scalability. 
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Declaration and Power of Attorney 
for a Patent Application 

Declaration 

As below named inventor, I hereby declare that my residence post office address, and citizenship are as stated 
below my name. Further, 1 hereby declare that I believe I am the original, first and sole inventor (if only one name is 
listed below) or an original, first and joint inventor (if plural names are listed below) of the subject matter which is 
claimed and for which a patent is sought on the invention entitled: 

MULTI-CHANNEL SUPPORT FOR VIRTUAL PRIVATE NETWORKS IN A PACKET TO ATM CELL 
CABLE SYSTEM 

the specification of which: 
is attached hereto, or 

x was filed on ...05/27/97 as application serial no. ,..08/864^550 : and 

was amended on 



I hereby state that I have reviewed and understand the contents of the above identified specification, including 
the claims, as amended by any amendment referred to above; and 

i acknowledge the duty to disclose information which is material to the examination of this application in 
accordance with Title 37, Code of Federal Regulations, Section 1.56(a). 



Foreign Priority Claim 

I hereby claim foreign priority benefits under Title 35, United States Code Section 1 1 9 of any foreign application(s) 
for patent or inventor's certificate listed below and have also identified below any foreign application for patent or 
inventor's certificate having a filing date before that of the application on which priority is claimed: 

Number Country Date Filed Priority Claimed 

yes no 
yes no 



U.S. Priority Claim 

! hereby claim the benefit under Title 35, United States Code, Section 120 of any United States application(s) 
listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the prior 
United States application in the manner provided by the first paragraph of Title 35, United States Code, Section 
112, ! acknowledge the duty to disclose material information as defined in Title 37, Code of Federal Regulations, 
Section 1.56(a) which occurred between the filing date of the prior application and the national or PCT 
international filing date of this application: 

Serial Number Filing Date Status (patented/pending/abandoned) 
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Power of Attorney 

As a named inventor, I hereby appoint the following attorney(s) and/or agent(s) to prosecute this application and 
transact all business in the Patent Trademark Office connected therewith. 

.££JR®§L Z:....Hao Registration No.: _36 # , 398 

Anthony .„C;..„Murabito Registration No.: .,..3 5 , 295 

.^£^.?....?..:....!?.?S5 L .?.?. Registration No.: ...35/398 

Frank tM D : ....N£irjfen Registration No.: 39 ,.79.0 



Signatures 

I hereby declare that all statements made herein of my own knowledge are true and that all statements made on 
information and belief are believed to be true; and further that these statements were made with the knowledge 
that willful false statements and the like so made are punishable by fine or imprisonment, or both, under Section 
1001 of Title 18 of the United States Code and that such willful false statements may jeopardize the validity of the 
application or any patent issued thereon. 



Full Name of Sole/First Inventor: „ Mark e. Laubach 



Inventor's Signature ^^^1^1^. Date Lf^.^.f^JlZ... 

Residence Mountain View, California 94040 Citizenship USA 

(City State) 

P.O. Address „!9.L.Slee£^ CA 9404Q 

Full Name of Second/Joint Inventor: Sanford l. Helton 



Inventor's Signature Date 

Residence San Jose, California 95124 cityzenship USA 

'(City State) *' 
P.O. Address 4940 Esther Drive, San Jose, CA 95124 



Full Name of Third/Joint Inventor: ^Alireza tM Raissinia 

Inventor's Signature /l^flO- Da * e ^c^/j,.^..... 

Residence ...Monte i Sereno 95030 Citizenship USA * \ 

(City v " "State) 
P.O. Address 15147 Elm Park, Monte Sereno, CA 95030 



Full Name of Fourth/Joint Inventor: Paul A. Gordon 



Inventor's Signature Date 

Residence ...Santa Cbra <^£n^p UK III.I..ILI"'" 

(City State) 

P.O. Address 1059 Madison Street, Santa Clara, CA 95050 



Full Name of Fifth/Joint Inventor: ..Malay _m .....Thaker b 



Signature C^L^ Date I^(l^l3.3^... 

e CampbellTcai^ Citizenship USA 



Inventor's 

Residence Campbell, California 9f50'08 Citizenship 

(City State) 
P.O. Address .. 4.0 15 m> Valerie CA 95008 
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Full Name of Sixth/Joint Inventor: ...Kathleen Nichols 

Inventor's Signature \ Date 

Residence Woodside" Caiiifornia" "?40623.Z"ZIII.1...!1" Citizenship USA 

(City State) 
P.O. Address A?„...§.ISXi.i ne ...Drive,. ..Woodside i> CA 9.40.62 
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Declaration and Power of Attorney 
for a Patent Application 

Declaration 

As below named inventor, I hereby declare that my residence post office address, and citizenship are as stated 
below my name. Further, I hereby declare that I believe I am the original, first and sole inventor (if only one name is 
listed below) or an original, first and joint inventor (if plural names are listed below) of the subject matter which is 
claimed and for which a patent is sought on the invention entitled: 

MULT I -CHANNEL SUPPORT FOR VIRTUAL PRIVATE NETWORKS IN A PACKET TO ATM CELL 
CABLE SYSTEM 

the specification of which: 
is attached hereto, or 

"x was filed on 05 /27 / ;97 as application serial no. ...08 / 86£, 5 a 50 : and 

was amended on 



I hereby state that I have reviewed and understand the contents of the above identified specification, including 
the claims, as amended by any amendment referred to above; and 

I acknowledge the duty to disclose information which is material to the examination of this application in 
accordance with Title 37, Code of Federal Regulations, Section 1.56(a). 



Foreign Priority Claim 

I hereby claim foreign priority benefits under Title 35, United States Code Section 119 of any foreign application(s) 
for patent or inventor's certificate listed below and have also identified below any foreign application for patent or 
inventor's certificate having a filing date before that of the application on which priority is claimed: 

Number Country Date Filed Priority Claimed 

yes no 



yes no 



U.S. Priority Claim 

I hereby claim the benefit under Title 35, United States Code, Section 120 of any United States application(s) 
listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the prior 
United States application in the manner provided by the first paragraph of Title 35, United States Code, Section 
1 12, 1 acknowledge the duty to disclose material information as,defined in Title 37, Code of Federal Regulations, 
Section 1.56(a) which occurred between the filing date of the prior application and the national or PCT 
international filing date of this application: 

Serial Number Filing Date Status (patented/pending/abandoned) 
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Power of Attorney 

As a named inventor, I hereby appoint the following attorney(s) and/or agent(s) to prosecute this application and 
transact all business in the Patent Trademark Office connected therewith. 

Ja£^ m £^,„Kao n Registration No.: _3 6 .,.39.8 

Registration No.: 35 , 295 

John i p . Wagner Registration No.: ,...35/398 

Frank D . ..Nguyen Registration No.: im 3 9 , 7 9.0 



Signatures 

I hereby declare that all statements made herein of my own knowledge are true and that all statements made on 
information and belief are believed to be true;, and further that these statements were made with the knowledge 
that willful false statements and the like so made are punishable by fine or imprisonment, or both, under Section 
1001 of Title 18 of the United States Code and that such willful false statements may jeopardize the validity of the 
application or any patent issued thereon. 

Full Name of Sole/First Inventor: ,.HEL.£:„..i.^.?J}. 

Inventor's Signature Date 

Residence ...Mountain^ Citizenship ..USA 

(City State) 

P.O. Address _1 .0 9 „.S .1 .e^ C A .94040 



Full Name of Second/Joint Inventor: Sanford h . Helton 

Inventor's Signature ( ^^^*r^f^_..: 1^^^^^!^^^ ^ a * e 

Residence San Jose, Cpff^ Citizenship USA 

(City ' State) 
P.O. Address 4940 Esther Drive, San Jose, CA 95124 



/M'JS.2... 



Full Name of Third/Joint Inventor: _ Alireza ...Mi?..?.i5.i.?: 

Inventor's Signature Date 

Residence ...Moi^ Citizenship USA 

P.O. Address 15147 Elm Park, Monte Serenq^CA 95030 



Full Name of Fourth/Joint Inventor: ...Paul .A. ....Gordon 

Inventor's Signature Date 

Residence Santa CiaraTc^ 7111 Citizenship UK 

"(City State) 
P.O. Address 1059 Madison Street, Santa Clara, CA 95050 



Full Name of Fifth/Joint Inventor: Malay m. Thaker 



Inventor's Signature Date 

Residence Campbell" C^ Citizenship m USA 

(City Siaiej 
P.O. Address 4015 Valerie Drive, Campbell ,_CA 95008 
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Full Name of Sixth/Joint Inventor: ..K?tM.®.?5....^..:....Ei.9^°.i!:.?. 

Inventor's Signature ; Date 

Residence Woodside'rCalif^ Citizenship USA 

(City State) 
P.O. Address J._2_ .Skyline . Drive, >M .Woodside M CA 94062 
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Declaration and Power of Attorney 
for a Patent Application 

Declaration 

As below named inventor, I hereby declare that my residence post office address, and citizenship are as stated 
below my name. Further, I hereby declare that I believe I am the original, first and sole inventor (if only one name is 
listed below) or an original, first and joint inventor (if plural names are listed beiow) of the subject matter which is 
claimed and for which a patent is sought on the invention entitled: 

MUtTI -CHANNEL SUPPORT FOR VIRTUAL PRIVATE NETWORKS IN A PACKET TO ATM CELL 
CABLE SYSTEM 

the specification of which: 
is attached hereto, or 

ZIZ. was fi,ed on ..£5/27/97 as application serial no. ...0 8/ 86 4 , 550 : and 

was amended on 



I hereby state that I have reviewed and understand the contents of the above identified specification, including 
the claims, as amended by any amendment referred to above; and 

I acknowledge the duty to disclose information which is material to the examination of this application in 
accordance with Title 37, Code of Federal Regulations, Section 1 .56(a). 



Foreign Priority Claim 

I hereby claim foreign priority benefits under Title 35, United States Code Section 1 19 of any foreign application(s) 
for patent or inventor's certificate listed beiow and have also identified below any foreign application for patent or 
inventor's certificate having a filing date before that of the application on which priority is claimed: 

Number Country Date Filed Priority Claimed 

yes rro 

yes no 



U.S. Priority Claim 

I hereby claim the benefit under Title 35, United States Code, Section 120 of any United States application(s) 
listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the prior 
United States application in the manner provided by the first paragraph of Title 35, United States Code, Section 
1 12, 1 acknowledge the duty to disclose material information as defined in Title 37, Code of Federal Regulations, 
Section 1 .56(a) which occurred between the filing date of the prior application and the national or PCT 
international filing date of this application: 

Serial Number Filing Date Status (patented/pending/abandoned) 
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Power of Attorney 

As a named inventor, I hereby appoint the following attorney(s) and/or agent(s) to prosecute this application and 
transact all business in the Patent Trademark Office connected therewith. 

James p .... Hao Registration No.: ,..3.6 , 39.8 

Anth^ Registration No.: . J.5 ,..295 

£2hR.I^.M$R5Z. Registration No.: ,...35,398 

Frank D. Nguyen Registration No.: 39 .,.79.5 



Signatures 

I hereby declare that all statements made herein of my own knowledge are true and that all statements made on 
information and belief are believed to be true; and further that these statements were made with the knowledge 
that willful false statements and the like so made are punishable by fine or imprisonment, or both, under Section 
1001 of Title 18 of the United States Code and that such willful false statements may jeopardize the validity of the 
application or any patent issued thereon. 

Full Name of Sole/First Inventor: „M?£fe....?..\»i a :H^£^. 

Inventor's Signature Date 

Residence Mountain Citizenship USA 

(City ? State) 

P.O. Address 10.9..S„lee£e£^ CA .94040 

Full Name of Second/Joint Inventor: janf ord _l . ; „..Helton . 

Inventor's Signature Date 

Residence San Jose"CaiifomjF Citizenship ..USA 

(City State) 

P.O. Address 4940 Esther Drive, San Jose, CA 95124 



Full Name of Third/Joint Inventor: m Alireza ..Rais sinia 

Inventor's Signature Date 

Residence Monte Serei^ 

(City siaiej 
P.O. Address 15147 Elm Park, Monte Sereno, CA 95030 



Full Name of Fourth/Joint Inventor: ..Paul .^a. ....Gordon 

Inventor's Signature Date 

Residence Santa Clarai'CaNfom Citizenship U.K. 

'(City Siaiej 
P.O. Address 1059 Madison Street, Santa Clara, CA 95050 



Full Name of Fifth/Joint Inventor: ...Malay M....,.Thaker 

Inventor's Signature Date 

Residence Campbell Cato Citizenship ...USA 

(City "Siaiej 
P.O. Address 4015 Valerie Driv^ §.5.008 
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Full Name of Sixth/Joint inventor: ..Kathleen^ 

Inventor's Signature ^^.AjOJhh, : Date iMlihj. 

Residence Woodside7Caiifornia . .94062 Citizenship JJSA 

(City State) 

P.O. Address M i? M jk^line # ^ 
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